CVE-2024-28115

Summary

CVE-2024-28115 is a vulnerability affecting FreeRTOS, a real-time operating system for microcontrollers. Versions of the FreeRTOS Kernel up to 10.6.1 are susceptible to local privilege escalation through Return Oriented Programming (ROP) attacks, should a code injection vulnerability arise. Impacted versions include those utilizing ARMv7-M MPU ports and ARMv8-M ports with Memory Protected Unit (MPU) support. This issue is rectified in version 10.6.2, which introduces a new MPU wrapper to mitigate the privilege escalation risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.