CVE-2024-28115

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege escalation via Return Oriented Programming techniques should a vulnerability exist that allows code injection and execution. These issues affect ARMv7-M MPU ports, and ARMv8-M ports with Memory Protected Unit (MPU) support enabled (i.e. `configENABLE_MPU` set to 1). These issues are fixed in version 10.6.2 with a new MPU wrapper.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
FreeRTOS	FreeRTOS-Kernel	< 10.6.2
freertos	freertos-kernel	< 10.6.2

References

https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.6.2Release Notes
https://github.com/FreeRTOS/FreeRTOS-Kernel/security/advisories/GHSA-xcv7-v92w-gq6rTechnical Description, Vendor Advisory
https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.6.2Release Notes
https://github.com/FreeRTOS/FreeRTOS-Kernel/security/advisories/GHSA-xcv7-v92w-gq6rTechnical Description, Vendor Advisory

Timeline

Published: Mar 7, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-281168.8Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-Side Template Inject CVE-2024-281178.8Grav is an open-source, flat-file content management system. Prior to version 1.7.45, Grav validates accessible functions through the Utils:CVE-2024-281188.8Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to twig extension class CVE-2024-281198.8Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to twig extension class CVE-2024-28128.8A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classified as critical. This affects the function formWriteF CVE-2024-281207.5codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn CVE-2024-281218.8stimulus_reflex is a system to extend the capabilities of both Rails and Stimulus by intercepting user interactions and passing them to Rail CVE-2024-281226.8JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. This vulnerability allows an attacker CVE-2024-281239.8Wasmi is an efficient and lightweight WebAssembly interpreter with a focus on constrained and embedded systems. In the WASMI Interpreter, an CVE-2024-281259.8FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed t CVE-2024-281266.1Cross-site scripting vulnerability exists in 0ch BBS Script ver.4.00. An arbitrary script may be executed on the web browser of the user acc CVE-2024-281277.5Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of priv