CVE-2026-16511 | Zephyrproject Zephyr up to 4.3.1/4.4.x RTIO Syscall Verifier rtio_syscalls.c z_vrfy_rtio_sqe_cancel pointer privileges management

November 4, 2026 Yanac

A vulnerability classified as very critical has been found in Zephyrproject Zephyr up to 4.3.1/4.4.x. This impacts the function z_vrfy_rtio_sqe_cancel of the file subsys/rtio/rtio_syscalls.c of the component RTIO Syscall Verifier. Performing a manipulation of the argument pointer results in improper privilege management.

This vulnerability is cataloged as CVE-2026-16511. The attack must be initiated from a local position. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More