{"id":919,"date":"2026-08-21T23:02:52","date_gmt":"2026-08-21T20:02:52","guid":{"rendered":"https:\/\/www.tayfnews.tech\/tr\/genel\/freertos-guvenlik-aciklari-aws-dort-cekirdek-kusurunu-acikladi\/"},"modified":"2026-08-21T23:02:52","modified_gmt":"2026-08-21T20:02:52","slug":"freertos-guvenlik-aciklari-aws-dort-cekirdek-kusurunu-acikladi","status":"publish","type":"post","link":"https:\/\/www.tayfnews.tech\/tr\/technology\/freertos-guvenlik-aciklari-aws-dort-cekirdek-kusurunu-acikladi\/","title":{"rendered":"FreeRTOS G\u00fcvenlik A\u00e7\u0131klar\u0131: AWS D\u00f6rt \u00c7ekirdek Kusurunu A\u00e7\u0131klad\u0131"},"content":{"rendered":"<p>Amazon Web Services, mikrodenetleyiciler ve kaynak k\u0131s\u0131tl\u0131 mikroi\u015flemciler i\u00e7in \u00f6zel olarak tasarlanm\u0131\u015f, yayg\u0131n olarak kullan\u0131lan bir ger\u00e7ek zamanl\u0131 i\u015fletim sistemi \u00e7ekirde\u011fi olan <strong>FreeRTOS<\/strong> \u00e7ekirde\u011finde ke\u015ffedilen d\u00f6rt g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 ele alan kritik bir g\u00fcvenlik dan\u0131\u015fma raporu yay\u0131mlad\u0131. <strong>2026-086-AWS<\/strong> B\u00fclten Kimli\u011fi alt\u0131nda ve 21.08.2026 tarihinde resmi olarak yay\u0131mlanan b\u00fclten; CVE-2026-77234, CVE-2026-77235, CVE-2026-77236 ve CVE-2026-77237 olarak takip edilen ve etkilenen yap\u0131land\u0131rmalar\u0131 kullanan geli\u015ftiriciler ile sistem y\u00f6neticilerinin acil m\u00fcdahalesini gerektiren d\u00f6rt ayr\u0131 g\u00fcvenlik kusurunun alt\u0131n\u0131 \u00e7iziyor.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 counter-hierarchy ez-toc-counter ez-toc-transparent ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7indekiler<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u0130\u00e7indekiler Tablosunu A\u00e7\/Kapat\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.tayfnews.tech\/tr\/technology\/freertos-guvenlik-aciklari-aws-dort-cekirdek-kusurunu-acikladi\/#FreeRTOS_Guvenlik_Aciklarinin_Kapsamini_Anlamak\" >FreeRTOS G\u00fcvenlik A\u00e7\u0131klar\u0131n\u0131n Kapsam\u0131n\u0131 Anlamak<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.tayfnews.tech\/tr\/technology\/freertos-guvenlik-aciklari-aws-dort-cekirdek-kusurunu-acikladi\/#Etkilenen_Bilesenlerin_ve_CVElerin_Ayrintili_Dokumu\" >Etkilenen Bile\u015fenlerin ve CVE&#8217;lerin Ayr\u0131nt\u0131l\u0131 D\u00f6k\u00fcm\u00fc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.tayfnews.tech\/tr\/technology\/freertos-guvenlik-aciklari-aws-dort-cekirdek-kusurunu-acikladi\/#Gelistiriciler_Icin_Azaltma_Adimlari_ve_Sonraki_Adimlar\" >Geli\u015ftiriciler \u0130\u00e7in Azaltma Ad\u0131mlar\u0131 ve Sonraki Ad\u0131mlar<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"FreeRTOS_Guvenlik_Aciklarinin_Kapsamini_Anlamak\"><\/span>FreeRTOS G\u00fcvenlik A\u00e7\u0131klar\u0131n\u0131n Kapsam\u0131n\u0131 Anlamak<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ger\u00e7ek zamanl\u0131 i\u015fletim sistemleri; \u00f6ng\u00f6r\u00fclebilir yan\u0131t s\u00fcrelerinin ve verimli kaynak y\u00f6netiminin \u00e7ok \u00f6nemli oldu\u011fu g\u00f6m\u00fcl\u00fc sistemlerin, Nesnelerin \u0130nterneti (IoT) cihazlar\u0131n\u0131n ve end\u00fcstriyel otomasyon donan\u0131mlar\u0131n\u0131n omurgas\u0131n\u0131 olu\u015fturur. FreeRTOS, bu alandaki en belirgin a\u00e7\u0131k kaynakl\u0131 \u00e7ekirdeklerden biri olarak durmaktad\u0131r. Bununla birlikte, yeni a\u00e7\u0131klanan g\u00fcvenlik kusurlar\u0131; bellek koruma birimleri ve donan\u0131m destekli g\u00fcvenlik y\u00fcr\u00fctme durumlar\u0131 gibi karma\u015f\u0131k donan\u0131m-yaz\u0131l\u0131m entegrasyon katmanlar\u0131n\u0131n, yap\u0131land\u0131rmalar titizlikle y\u00f6netilmedi\u011fi takdirde potansiyel ihlaller i\u00e7in hassas vekt\u00f6rler ortaya \u00e7\u0131kard\u0131\u011f\u0131n\u0131 g\u00f6stermektedir.<\/p>\n<p>D\u00f6rt g\u00fcvenlik a\u00e7\u0131\u011f\u0131, \u00e7ekirdek i\u00e7indeki belirli mimari \u00f6zelliklerin ve uygulama tercihlerini hedef almaktad\u0131r; yani FreeRTOS \u00fczerine in\u015fa edilmi\u015f her uygulama do\u011fal olarak risk alt\u0131nda de\u011fildir. Maruziyet, bir projenin bellek koruma birimleri, kuyruk setleri veya g\u00fcvenli y\u00fcr\u00fctme b\u00f6lgeleri gibi belirli i\u015flevsel mod\u00fclleri i\u00e7erip i\u00e7ermedi\u011fine ba\u011fl\u0131 olarak kat\u0131 bir \u015fekilde belirlenir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Etkilenen_Bilesenlerin_ve_CVElerin_Ayrintili_Dokumu\"><\/span>Etkilenen Bile\u015fenlerin ve CVE&#8217;lerin Ayr\u0131nt\u0131l\u0131 D\u00f6k\u00fcm\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>G\u00fcvenlik b\u00fclteninin titiz bir incelemesi, her bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n yaz\u0131l\u0131m ekosisteminde hangi kesin ko\u015fullar alt\u0131nda ortaya \u00e7\u0131kt\u0131\u011f\u0131n\u0131 g\u00f6zler \u00f6n\u00fcne sermektedir:<\/p>\n<ul>\n<li><strong>CVE-2026-77234:<\/strong> Bu sorun, \u00f6zellikle yaz\u0131l\u0131m zamanlay\u0131c\u0131lar\u0131 ile birlikte FreeRTOS Bellek Koruma Birimi&#8217;ni (MPU) kullanan yap\u0131land\u0131rmalar\u0131 etkiler. FreeRTOS MPU&#8217;sunu kullanmadan \u00e7al\u0131\u015fan uygulamalar bundan etkilenmez. Etkilenen yaz\u0131l\u0131m s\u00fcr\u00fcmleri, MPU etkin ba\u011flant\u0131 noktalar\u0131 i\u00e7in 7.0.0 s\u00fcr\u00fcm\u00fcnden 11.3.0 s\u00fcr\u00fcm\u00fcne (dahil) kadar uzanmaktad\u0131r.<\/li>\n<li><strong>CVE-2026-77235:<\/strong> Bu kusur, ARMv8-M yap\u0131land\u0131rmalar\u0131nda ARM TrustZone teknolojisini kullanan mimarileri hedef al\u0131r. ARM TrustZone g\u00fcvenli ba\u011flamlar\u0131n\u0131 i\u00e7ermeyen uygulamalar bu riskten muaft\u0131r. Etkilenen derlemeler, \u00f6zellikle TrustZone ve MPU&#8217;yu kullanan ARMv8-M ba\u011flant\u0131 noktalar\u0131 i\u00e7in 10.2.0 s\u00fcr\u00fcm\u00fcnden 11.3.0 s\u00fcr\u00fcm\u00fcne kadar olan aral\u0131\u011f\u0131 kapsamaktad\u0131r.<\/li>\n<li><strong>CVE-2026-77236:<\/strong> Benzer \u015fekilde, bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131 da ARM TrustZone (ARMv8-M) yap\u0131land\u0131rmalar\u0131n\u0131 etkiler ve TrustZone i\u00e7ermeyen uygulamalar bundan etkilenmez. Savunmas\u0131z s\u00fcr\u00fcm penceresi, TrustZone yetenekleriyle donat\u0131lm\u0131\u015f ARMv8-M ba\u011flant\u0131 noktalar\u0131 i\u00e7in 10.2.0 ila 11.3.0 s\u00fcr\u00fcmlerini kapsar.<\/li>\n<li><strong>CVE-2026-77237:<\/strong> Bu sorun, <code>configUSE_QUEUE_SETS=1<\/code> yap\u0131land\u0131rma parametresi arac\u0131l\u0131\u011f\u0131yla kuyruk setlerinin a\u00e7\u0131k\u00e7a etkinle\u015ftirildi\u011fi derlemeleri ilgilendirir. Kuyruk setleri etkinle\u015ftirilmeden derlenen sistemler bundan etkilenmez. Kusur, 7.4.0 ile 11.3.0 aras\u0131ndaki s\u00fcr\u00fcmleri \u00e7al\u0131\u015ft\u0131ran MPU etkin ba\u011flant\u0131 noktalar\u0131n\u0131 etkiler.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Gelistiriciler_Icin_Azaltma_Adimlari_ve_Sonraki_Adimlar\"><\/span>Geli\u015ftiriciler \u0130\u00e7in Azaltma Ad\u0131mlar\u0131 ve Sonraki Ad\u0131mlar<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FreeRTOS \u00e7ekirde\u011fini kullanan g\u00f6m\u00fcl\u00fc \u00fcr\u00fcnlerin bak\u0131m\u0131n\u0131 yapan m\u00fchendislik ekipleri, AWS g\u00fcvenlik dan\u0131\u015fma raporunda \u00f6zetlenen kriterlere kar\u015f\u0131 kendi kod taban\u0131 yap\u0131land\u0131rmalar\u0131n\u0131 derhal incelemelidir. G\u00fcvenlik a\u00e7\u0131klar\u0131, MPU yal\u0131t\u0131m\u0131, kuyruk y\u00f6netimi ve TrustZone g\u00fcvenli i\u015fleme gibi iste\u011fe ba\u011fl\u0131 alt sistemlerle derinlemesine ba\u011flant\u0131l\u0131 oldu\u011fundan, proje yap\u0131land\u0131rma dosyalar\u0131n\u0131n denetlenmesi maruziyeti belirlemede kritik ilk ad\u0131md\u0131r.<\/p>\n<p>Kurulu\u015flar, mikrodenetleyici da\u011f\u0131t\u0131mlar\u0131n\u0131 potansiyel istismara kar\u015f\u0131 g\u00fcvence alt\u0131na almak i\u00e7in gereken gerekli yama veya yap\u0131land\u0131rma g\u00fc\u00e7lendirmelerini uygulamak \u00fczere resmi AWS g\u00fcvenlik b\u00fcltenine ve ilgili y\u00fckseltme yollar\u0131na ba\u015fvurmal\u0131d\u0131r.<\/p>\n<p><em>Kaynak: <a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/rss\/2026-086-aws\/\" target=\"_blank\" rel=\"noopener noreferrer\">Orijinal Makale<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>AWS, bellek korumas\u0131 ve ARM TrustZone kurulumlar\u0131n\u0131 etkileyen d\u00f6rt kritik FreeRTOS a\u00e7\u0131\u011f\u0131n\u0131 detayland\u0131ran 2026-086-AWS b\u00fcltenini yay\u0131mlad\u0131.<\/p>\n","protected":false},"author":1,"featured_media":918,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"googlesitekit_rrm_CAowrrDMDA:productID":"","tayfnews_source_url":"","footnotes":"","rank_math_focus_keyword":"FreeRTOS, g\u00fcvenlik b\u00fclteni, bellek korumas\u0131, AWS, a\u00e7\u0131klar, \u00e7ekirdek","rank_math_title":"FreeRTOS G\u00fcvenlik A\u00e7\u0131klar\u0131: AWS D\u00f6rt \u00c7ekirdek Kusurunu A\u00e7\u0131klad\u0131","rank_math_description":"AWS, bellek korumas\u0131 ve ARM TrustZone kurulumlar\u0131n\u0131 etkileyen d\u00f6rt kritik FreeRTOS a\u00e7\u0131\u011f\u0131n\u0131 detayland\u0131ran 2026-086-AWS b\u00fcltenini yay\u0131mlad\u0131."},"categories":[2],"tags":[],"class_list":["post-919","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts\/919","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/comments?post=919"}],"version-history":[{"count":0,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts\/919\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/media\/918"}],"wp:attachment":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/media?parent=919"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/categories?post=919"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/tags?post=919"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}