CVE-2026-102006: VxWorks 7 Memory allocation
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Wind River VxWorks 7to a version that resolves this vulnerability.Fixed in 26.09
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
An attacker needs local access and low privileges. Exploitation does not require user interaction.
What is the practical impact of successful exploitation?
Repeated use of the affected system call arguments can cause kernel memory not to be released when the calling application terminates. This can exhaust available kernel memory and cause a denial of service.
Which versions should be remediated?
Wind River VxWorks 7 versions prior to 26.09 are affected. The issue is fixed in version 26.09.