The vulnerability arises from an incorrect authorization check in the Arm Cortex‑R82 MPU port implementation of FreeRTOS‑Kernel. An unprivileged task that can invoke an MPU system call receives a buffer argument that is not verified properly. This oversight allows the task to read or write privileged kernel memory outside the area intentionally allocated to it. The result is a local privilege escalation that can compromise the operating‑system integrity and potentially enable arbitrary code execution. The weakness corresponds to the CWE‑863 category of missing or incomplete privilege checks.

FreeRTOS, specifically the kernel component named FreeRTOS‑Kernel, is affected. The flaw exists in releases V11.3.0 and V11.3.1 where MPU support is enabled. Systems using earlier or later versions of the kernel, or those that have disabled the MPU feature, are not impacted.

The CVSS score of 9.3 marks this as critically high severity. Although the EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog, the local nature of the attack means that any attacker who can run an unprivileged task on an MPU‑enabled build can exploit the flaw. The vector likely requires that the attacker has the ability to create or modify a task that passes a controlled buffer to the MPU configuration API, so the practical exploitation vector is internal. Given the high impact rating and the lack of current public exploitation evidence, organizations should treat this as a critical patchable vulnerability.