CVE-2026-12364 | Zephyr Project up to 4.4.1 Logging Syscall Verifier subsys/logging/log_msg.c z_vrfy_z_log_msg_static_create source/desc/package/data privileges management

A vulnerability, which was classified as problematic, has been found in Zephyr Project Zephyr up to 4.4.1. This impacts the function z_vrfy_z_log_msg_static_create of the file subsys/logging/log_msg.c of the component Logging Syscall Verifier. Performing a manipulation of the argument source/desc/package/data results in improper privilege management.

This vulnerability is cataloged as CVE-2026-12364. The attack must be initiated from a local position. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More