CVE-2026-19574 | ZephyrProject Zephyr up to 4.4.2 MMU ASID Allocation arch/arm64/core/mmu.c arch_mem_domain_init privileges management

October 9, 2026 Yanac

A vulnerability marked as very critical has been reported in ZephyrProject Zephyr up to 4.4.2. The impacted element is the function arch_mem_domain_init of the file arch/arm64/core/mmu.c of the component MMU ASID Allocation. This manipulation causes improper privilege management.

This vulnerability is handled as CVE-2026-19574. It is possible to launch the attack on the local host. There is not any exploit available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More