CVE-2026-10682

CVE-2026-10682 describes an out-of-bounds read/write in Zephyr’s userspace verifier for the log_filter_set syscall. The signed comparison src_id < (int16_t)log_src_cnt_get(domain_id) allowed a negative src_id (e.g., -1) to pass, which after 32‑bit sign-to-unsigned conversion becomes 0xFFFFFFFF...