This vulnerability (CVE-2026-77235) involves a use-after-free condition in FreeRTOS-Kernel due to missing privilege verification in the secure context cleanup handler before version 11.3.1. Local users can exploit this via the SVC handler responsible for secure context deallocation, potentially causing memory corruption in the secure world. The CVSS 3.1 score is 7.3 (high), reflecting local attack vector with low complexity, requiring privileges, no user interaction, and impacts integrity and availability. The vendor advisory from AWS recommends upgrading to version 11.3.1 or later to fix the issue.

Successful exploitation can lead to a use-after-free condition in secure-world memory, which may result in integrity loss and denial of service (availability impact). Confidentiality is not affected. The vulnerability requires local privileges and has a low attack complexity. No known exploits are reported in the wild at this time.

Users should upgrade FreeRTOS-Kernel to version 11.3.1 or later, as this version includes the fix for the vulnerability. No other mitigations or temporary workarounds are indicated by the vendor advisory. Patch status is confirmed by the vendor advisory.