CVE-2026-11576: Double Free
The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path unconditionally calls fxfileclose() even when the file was never successfully opened. Multiple error branches jump to the shared cleanup label before any file open operation has occurred, causing fxfileclose() to operate on an uninitialized file handle, leading to undefined behavior, double-close issues, or memory corruption.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
eclipse-threadx NetX Duoto a version that resolves this vulnerability.Patch CVE-2025-0728
Event History
Frequently Asked Questions
What is the severity of CVE-2026-11576?
CVE-2026-11576 has a severity rating of 7.5, which is categorized as high.
How do I fix CVE-2026-11576?
To fix CVE-2026-11576, update to the latest patched version of Eclipse NetX Duo that addresses this vulnerability.
What types of systems are affected by CVE-2026-11576?
CVE-2026-11576 affects systems running Eclipse NetX Duo, particularly those utilizing the HTTP server PUT process.
What is the impact of CVE-2026-11576?
CVE-2026-11576 can lead to a denial of service due to a double free vulnerability.
What are the specific error handling issues in CVE-2026-11576?
CVE-2026-11576 involves improper error handling that may lead to fx_file_close() being called on a file that was not successfully opened, resulting in a double free.