What is CVE-2026-10681?
CVE-2026-10681 is a race condition in Zephyr's userspace dynamic-objects subsystem on SMP systems, caused by missing `lists_lock` in the thread_idx_alloc() function in kernel/userspace/userspace.c when allocating thread permission indices. This can lead to resource conflicts when two user-mode threads call the `k_object_alloc(K_OBJ_THREAD)` syscall concurrently. Users should apply the official Zephyr patch to fix the kernel.
Azərbaycanca: CVE-2026-10681 Zephyr real-time əməliyyat sisteminin SMP sistemlərində, kernel/userspace/userspace.c faylındakı thread_idx_alloc() funksiyasında `lists_lock` alınmadığı üçün yaranan yarış şəraitidir. Bu, iki istifadəçi rejimli thread-in eyni anda `k_object_alloc(K_OBJ_THREAD)` çağırması zamanı resurs münaqişəsinə səbəb olur. İstifadəçilərə Zephyr layihəsinin rəsmi patch-ini tətbiq etmək və kernel-i yeniləmək tövsiyə olunur.
Related CVEs
link basis: shared vendor: Zephyr
FAQ2
In which file of Zephyr RTOS does the CVE-2026-10681 vulnerability reside?
The vulnerability is located in the thread_idx_alloc() function within the kernel/userspace/userspace.c file on SMP systems of Zephyr real-time operating system.
Which syscall triggers the resource conflict in CVE-2026-10681?
The resource conflict occurs when two user-mode threads concurrently call the `k_object_alloc(K_OBJ_THREAD)` syscall.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.