CVE-2026-91007 | ZephyrProject Zephyr up to 4.3.1/4.4.x Syscall Verifier charger_handlers.c z_vrfy_charger_set_prop/z_vrfy_charger_get_prop privileges management
A vulnerability labeled as very critical has been found in ZephyrProject Zephyr up to 4.3.1/4.4.x. Affected by this issue is the function z_vrfy_charger_set_prop/z_vrfy_charger_get_prop of the file drivers/charger/charger_handlers.c of the component Syscall Verifier. The manipulation of the argument prop results in improper privilege management.
This vulnerability is cataloged as CVE-2026-91007. The attack must be initiated from a local position. There is no exploit available.
The affected component should be upgraded.VulDB Recent EntriesRead More