CVE-2026-119086

Vendor

FreeRTOS

Product

FreeRTOS-Kernel

CVSS v3.1

6.5 AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Weakness

CWE-121, CWE-843

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 20
   AWS bulletin AWS 40h ago

   CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

   Bulletin ID: 2026-158-AWS Publication Date: 10/30/2026 10:30 AM PDT Description: FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small microprocessors, distributed by Amazon. We identified…

   CVE-2026-119086 Amazon Web Services
2. 15
   CVE NVD 39h ago

   Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets…

   Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a…

   CVSS 6.5 CVE-2026-119086 FreeRTOS