CVE Explorer

CVE-2026-10682

The userspace verifier z_vrfy_log_filter_set() for the log_filter_set syscall in subsys/logging/log_mgmt.c performed a signed comparison against the int16_t src_id parameter: src_id < (int16_t)log_src_cnt_get(domain_id). Any negative value for src_id (e.g. -1) trivially satisfied this check and was forwarded into z_impl_log_filter_set, where it propagated to filter_set() and ultimately to get_dynamic_filter(), which uses source_id as an unsigned index into the linker-section array &TYPE_SECTION_

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:63d4ba79b2481f155997b0b3bc12b21fffa1a6d0380b53c76c119afa545aa917

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"collectionURL":"https://github.com/zephyrproject-rtos/zephyr","defaultStatus":"unaffected","packageName":"zephyr","product":"zephyr","programFiles":["subsys/logging/log_mgmt.c"],"vendor":"zephyrproject","versions":[{"lessThan":"4.5.0","status":"affected","version":"3.0.0","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6060f30621fbdb1c7adc97a963d4f375ac0307b64d5f9523a0a7784be1d68ca9 · sha256:a6cda552de444f3b… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":6.6,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:6060f30621fbdb1c7adc97a963d4f375ac0307b64d5f9523a0a7784be1d68ca9 · sha256:a6cda552de444f3b… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-787","description":"bounds","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:6060f30621fbdb1c7adc97a963d4f375ac0307b64d5f9523a0a7784be1d68ca9 · sha256:a6cda552de444f3b… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"name":"Fix commit","tags":["patch"],"url":"https://github.com/zephyrproject-rtos/zephyr/commit/56a15114c6acbab2067fe406dc3adda8608f3def"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6060f30621fbdb1c7adc97a963d4f375ac0307b64d5f9523a0a7784be1d68ca9 · sha256:a6cda552de444f3b… · /containers/cna/references/0

{"name":"GHSA-6vqh-mg7h-58qh","url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-6vqh-mg7h-58qh"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6060f30621fbdb1c7adc97a963d4f375ac0307b64d5f9523a0a7784be1d68ca9 · sha256:a6cda552de444f3b… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer