CVE-2026-0515

Summary

Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel.

Affected Software

VendorProductVersion RangeStatus
BlackBerry LtdQNX Software Development Platform7.1affected
BlackBerry LtdQNX Software Development Platformcpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*affected
BlackBerry LtdQNX Software Development Platform7.0affected
BlackBerry LtdQNX Software Development Platformcpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*affected
BlackBerry LtdQNX OS for Safety2.2.8 and earlieraffected
BlackBerry LtdQNX OS for Safetycpe:2.3:o:blackberry:qnx_os_for_safety:2.2:8:*:*:*:*:*:*affected
BlackBerry LtdQNX OS for Safety2.1.5 and earlieraffected
BlackBerry LtdQNX OS for Safetycpe:2.3:o:blackberry:qnx_os_for_safety:2.1:5:*:*:*:*:*:*affected
BlackBerry LtdQNX OS for Safety2.0.3 and earlieraffected
BlackBerry LtdQNX OS for Safetycpe:2.3:o:blackberry:qnx_os_for_safety:2.0:3:*:*:*:*:*:*affected
BlackBerry Ltd.QNX OS for Medical2.0.2 and earlieraffected
BlackBerry Ltd.QNX OS for Medicalcpe:2.3:o:blackberry:qnx_os_for_medical:2.0:2:*:*:*:*:*:*affected

Weaknesses

  • CWE-233: CWE-233 Improper handling of parameters

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References