Approved changes feed: RSS · Atom

cpe:2.3:a:freertos:freertos-kernel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFreertos (b5a989c8-84b0-54a8-895d-f23b74cdf599)
ProductFreertos Kernel (55c59986-b9ac-54b6-9cda-d34ac3403803)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28115 vulnerable 2026-06-08 06:33:26.497467 Privilege Escalation in FreeRTOS Kernel ARMv7-M MPU ports and ARMv8-M ports with MPU support enabled
HIGH (8.8)
FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege escalation via Return Oriented Programming techniques should a vulnerability exist that allows code injection and execution. These issues affect ARMv7-M MPU ports, and ARMv8-M ports with Memory Protected Unit (MPU) support enabled (i.e. `configENABLE_MPU` set to 1). These issues are fixed in version 10.6.2 with a new MPU wrapper.
Published: 2024-03-07T20:54:00.743Z
Updated: 2024-08-28T17:42:09.830Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.