CVE-2026-102006
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Wind River Systems Inc | VxWorks 7 | VxWorks 7 | affected |
Weaknesses
- CWE-401: CWE-401 Missing release of memory after effective lifetime
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.