CVE-2026-19595 | Zephyr Project up to 4.4.2 Syscall Verifier rtio_syscalls.c z_vrfy_rtio_cqe_get_mempool_buffer buff/buff_len permission

October 20, 2026 Yanac

A vulnerability labeled as problematic has been found in Zephyr Project Zephyr up to 4.4.2. The impacted element is the function z_vrfy_rtio_cqe_get_mempool_buffer of the file subsys/rtio/rtio_syscalls.c of the component Syscall Verifier. Executing a manipulation of the argument buff/buff_len can lead to permission issues.

This vulnerability is tracked as CVE-2026-19595. The attack is restricted to local execution. No exploit exists.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More