What is CVE-2026-71968?

CVE-2026-71968 is a medium-severity vulnerability in Op-tee Optee_os, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 6.7/10. Published 2026-08-10.

How severe is CVE-2026-71968?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Use After Free in Op-tee Optee_os

CVE-2026-71968

OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory…

Vulnerability class: Race Condition

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Op-tee Optee_os — versions 0, 8794043c4065c26a2b8b1313794ba5ba5f06d296

Weakness classification (CWE)

References

disclosure@vulncheck.com (issue-tracking)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-71968?: CVE-2026-71968 is a medium-severity vulnerability in Op-tee Optee_os, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 6.7/10. Published 2026-08-10.
How severe is CVE-2026-71968?: Medium severity. CVSS v3 base score is 6.7 out of 10.