Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to version 11.3.1 or later.

A missing privilege verification flaw exists in the secure context cleanup handler of FreeRTOS-Kernel versions prior to 11.3.1. The vulnerability allows local users to trigger a use-after-free condition in secure-world memory by exploiting the SVC handler for secure context deallocation. This affects systems using TrustZone-enabled ARM processors where FreeRTOS manages secure and non-secure contexts. The flaw stems from inadequate privilege checks before performing cleanup operations in secure memory regions. Successful exploitation could lead to memory corruption or potential code execution in the secure world. AWS has issued a security bulletin acknowledging the issue. The fix is available in FreeRTOS-Kernel version 11.3.1 and users are strongly advised to upgrade immediately.