CVE-2026-10676

Rejected reason: This CVE Record has been rejected by the Zephyr Project CNA. Subsequent analysis determined that the addressed defect is not reachable in any released version of Zephyr: on every supported release branch the affected value is corrected before it is used, and the change that exposes the defect exists only in unreleased development code. As no released version is affected, this identifier is withdrawn.

Published

Jun 12, 2026

Last Modified

Jun 12, 2026

Status

Rejected

• CVE-2026-10670The CONFIG_USERSPACE verification handler for the k_thread_n…5.5
• CVE-2026-10671In Zephyr's kernel pipe implementation, the userspace syscal…7.1
• CVE-2026-10672subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmwar…9.1
• CVE-2026-10673The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver …8.8
• CVE-2026-10674The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuar…5.5
• CVE-2026-10675In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsy…6.5
• CVE-2026-10677The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in ker…6.5
• CVE-2026-10678The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci…8.1
• CVE-2026-10679The DesignWare SPI driver (drivers/spi/spi_dw.c) computed th…5.5
• CVE-2026-1068An improper certificate validation vulnerability was reporte…5.3
• CVE-2026-10680The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_…7.6
• CVE-2026-10681In Zephyr's userspace dynamic-objects subsystem, thread_idx_…7