CVE-2026-102005
MediumCVSS 5.5Summary
In Wind River VxWorks 7 versions 24.03 through 26.03, a memory leak occurs under specific non-default configurations when processing certain service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09.
Risk Assessment
The memory leak can lead to system unavailability (DoS) in environments using non-default configurations, potentially disrupting critical embedded systems.
Recommendation
Upgrade VxWorks 7 to version 26.09 or later, which includes the fix for the memory leak.
Other vulnerabilities in Wind River VxWorks
See all- CVE-2026-102006Medium
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09.
- CVE-2026-102004High
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09.
- CVE-2026-97686Medium
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can cause the IPNET subsystem to fail to properly release allocated kernel memory and file descriptors before terminating the calling application. Fixed in Version 26.09.
Original NVD description (English source)
Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09
Vulnerability data from NVD (NIST) · CISA KEV · EPSS