Mmastodon TechnologyCybersecurity first seen 18 h ago, last 18 h ago, peak #5

Zephyr RTOS fuel gauge vulnerability rated 7.8 disclosed

Original: 🚨 EUVD-2026-97111 📊 Score: 7.8/10 (CVSS v3.1) 📦 Product: Zephyr 🏢 Vendor: zephyrproject 📅 Updated: 2026-10-11 📝 The user

A medium-high severity vulnerability, EUVD-2026-97111, has been catalogued in the Zephyr real-time operating system, maintained by the Zephyr Project. The flaw sits in the user-mode syscall verifiers for fuel gauge property functions in the drivers/fuel_gauge syscall handlers, where two declared checks were incomplete. The entry carries a CVSS v3.1 score of 7.8 and was updated on 11 October 2026.

Why now: Zephyr is widely used in embedded and IoT devices, so a syscall verifier flaw raises concerns about privilege-escalation risks in affected firmware.

ZephyrZephyr ProjectEUVD-2026-97111

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 18 h ago to 18 h ago.

Evidence

• 🚨 EUVD-2026-97111 📊 Score: 7.8/10 (CVSS v3.1) 📦 Product: Zephyr 🏢 Vendor: zephyrproject 📅 Updated: 2026-10-11 📝 The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fuel_gauge_syscall_handlers.c declared two… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1891245