CVE-2026-102006

Published: Sep 28, 2026Modified: Sep 30, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: 0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8 (Secondary)

Description

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (1)

https://support2.windriver.com/index.php?page=cve

Source: 0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8

Timeline

No history available yet.