CVE-2026-78118 | Zephyr Project up to 4.4.x Wait Queue kernel/include/wait_q.h z_waitq_head wait_q use after free

October 21, 2026 Yanac

A vulnerability, which was classified as very critical, has been found in Zephyr Project Zephyr up to 4.4.x. This affects the function z_waitq_head of the file kernel/include/wait_q.h of the component Wait Queue. Performing a manipulation of the argument wait_q results in use after free.

This vulnerability is identified as CVE-2026-78118. The attack is only possible with local access. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More