CVE-2026-87039 | Zephyr Project up to 4.4.x I2S Subsystem i2s_handlers.c z_vrfy_i2s_configure frame_clk_freq/mem_slab privileges management

November 4, 2026 Yanac

A vulnerability marked as very critical has been reported in Zephyr Project Zephyr up to 4.4.x. The impacted element is the function z_vrfy_i2s_configure of the file drivers/i2s/i2s_handlers.c of the component I2S Subsystem. This manipulation of the argument frame_clk_freq/mem_slab causes improper privilege management.

This vulnerability is tracked as CVE-2026-87039. The attack is restricted to local execution. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More