CVE-2026-97686
MediumCVSS 5.5Summary
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can cause the IPNET subsystem to fail to properly release allocated kernel memory and file descriptors before terminating the calling application. Fixed in Version 26.09.
Risk Assessment
Memory and file descriptor leaks can lead to exhaustion of system resources, potentially causing system crashes or denial of service.
Recommendation
It is recommended to upgrade Wind River VxWorks 7 to version 26.09 or later, which includes the fix.
Other vulnerabilities in Wind River VxWorks
See all- CVE-2026-102006Medium
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09.
- CVE-2026-102005Medium
In Wind River VxWorks 7 versions 24.03 through 26.03, a memory leak occurs under specific non-default configurations when processing certain service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09.
- CVE-2026-102004High
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09.
Original NVD description (English source)
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS