CVE-2026-10670 | zephyrproject zephyr up to 4.4.x Userspace Verification kernel/thread.c z_vrfy_k_thread_name_copy thread null pointer dereference

July 14, 2026 Yanac

A vulnerability was found in zephyrproject zephyr up to 4.4.x. It has been classified as problematic. Affected by this issue is the function z_vrfy_k_thread_name_copy of the file kernel/thread.c of the component Userspace Verification Handler. This manipulation of the argument thread causes null pointer dereference.

This vulnerability appears as CVE-2026-10670. The attack requires local access. There is no available exploit.VulDB Recent EntriesRead More