CVE-2026-102006
MediumCVSS 5.5Summary
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09.
Risk Assessment
Improper kernel memory release can lead to memory leaks and eventually resource exhaustion or system instability. This may impact the availability and stability of VxWorks devices.
Recommendation
Upgrade Wind River VxWorks 7 to version 26.09 or later, which fixes the kernel memory release issue. Monitor kernel memory usage on systems that cannot be immediately updated.
Other vulnerabilities in Wind River VxWorks
See all- CVE-2026-102005Medium
In Wind River VxWorks 7 versions 24.03 through 26.03, a memory leak occurs under specific non-default configurations when processing certain service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09.
- CVE-2026-102004High
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09.
- CVE-2026-97686Medium
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can cause the IPNET subsystem to fail to properly release allocated kernel memory and file descriptors before terminating the calling application. Fixed in Version 26.09.
Original NVD description (English source)
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09
Vulnerability data from NVD (NIST) · CISA KEV · EPSS