https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-77237.htmlhttps://patchthecve.com/cve/CVE-2026-77237.htmlWed, 14 Oct 2026 19:10:00 +0000MEDIUM 6.5: Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.https://patchthecve.com/cve/CVE-2026-77236.htmlhttps://patchthecve.com/cve/CVE-2026-77236.htmlWed, 14 Oct 2026 19:10:00 +0000HIGH 7.3: Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later.https://patchthecve.com/cve/CVE-2026-77235.htmlhttps://patchthecve.com/cve/CVE-2026-77235.htmlWed, 14 Oct 2026 19:10:00 +0000HIGH 7.3: Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to version 11.3.https://patchthecve.com/cve/CVE-2026-77234.htmlhttps://patchthecve.com/cve/CVE-2026-77234.htmlWed, 14 Oct 2026 19:10:00 +0000HIGH 8.8: Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.