CVE-2026-10681 | ZephyrProject Zephyr up to 4.4.0 Userspace Dynamic-Objects Subsystem userspace.c thread_idx_alloc race condition

July 25, 2026 Yanac

A vulnerability, which was classified as very critical, has been found in ZephyrProject Zephyr up to 4.4.0. This impacts the function thread_idx_alloc of the file kernel/userspace/userspace.c of the component Userspace Dynamic-Objects Subsystem. Performing a manipulation results in race condition.

This vulnerability is cataloged as CVE-2026-10681. The attack must be initiated from a local position. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More