CVE-2026-0515
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability in the SchedGet() system call of the QNX Neutrino kernel is caused by insufficient parameter validation. A local attacker could exploit this flaw to crash the kernel.
Risk Assessment
The risk is a potential Denial of Service (DoS) attack at the kernel level by an attacker with local access. This could disrupt critical services or the entire system.
Recommendation
It is recommended to immediately apply security patches provided by the vendor (BlackBerry QNX) for the QNX Neutrino system. Also, restrict local access to the system to trusted users only.
Other vulnerabilities in QNX Neutrino
See all- CVE-2026-4018Medium
A TOCTOU race condition in specific trace commands of the TraceEvent() system call allows an attacker with local access and the PROCMGR_AID_TRACE ability to cause information disclosure, data tampering, or a crash of the QNX Neutrino kernel.
- CVE-2026-4017High
A buffer overflow vulnerability in the entry handler of the TraceEvent() system call could allow a local attacker to cause information disclosure, data tampering, or a crash of the QNX Neutrino kernel.
Original NVD description (English source)
Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel.