CVE-2026-10681: Zephyr Unlocked Bitmap Rmw

The code identifies a free bit in a bitmap using `find_lsb_set` and modifies it without holding a lock. On SMP systems, multiple threads can concurrently observe the same free bit, leading to a race condition. Missing synchronization around the array read-modify-write causes multiple threads to acquire the same index. Wrap the access in a `k_spin_lock` or eq

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-10681-zephyr-unlocked-bitmap-rmw --engine opengrep

Description

The code identifies a free bit in a bitmap using `find_lsb_set` and modifies it without holding a lock. On SMP systems, multiple threads can concurrently observe the same free bit, leading to a race condition. Missing synchronization around the array read-modify-write causes multiple threads to acquire the same index. Wrap the access in a `k_spin_lock` or eq