CVE-2026-19676 | Zephyr Project up to 4.4.2 PECI peci_handlers.c z_vrfy_peci_transfer len privileges management

October 21, 2026 Yanac

A vulnerability identified as very critical has been detected in Zephyr Project Zephyr up to 4.4.2. This affects the function z_vrfy_peci_transfer of the file drivers/peci/peci_handlers.c of the component PECI. Performing a manipulation of the argument len results in improper privilege management.

This vulnerability is known as CVE-2026-19676. Attacking locally is a requirement. No exploit is available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More