CVE-2026-102006

Received Received - Intake

Memory Leak in Wind River VxWorks

Publication date: 2026-09-28

Last updated on: 2026-09-28

Assigner: WindRiver

Description

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-28

Last Modified

2026-09-28

Generated

2026-09-29

AI Q&A

2026-09-29

EPSS Evaluated

N/A

NVD

CVE-2026-102006

Affected Vendors & Products

Vendor	Product	Version / Range
wind_river	vxworks	26.09

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability in Wind River VxWorks 7 before version 26.09 involves a flaw where certain system call arguments cause the process management subsystem to fail to release allocated kernel memory when terminating an application. This leads to memory leaks in the kernel.

Impact Analysis

The vulnerability can cause kernel memory exhaustion over time, potentially leading to system instability, crashes, or degraded performance. It may require system reboots to recover allocated memory.

Compliance Impact

The vulnerability involves improper kernel memory release in Wind River VxWorks 7 prior to 26.09, which could lead to memory leaks during process termination. This may impact compliance with standards like GDPR or HIPAA by potentially causing system instability or unauthorized data exposure if exploited.

Mitigation Strategies

Update Wind River VxWorks to version 26.09 or later to address the kernel memory release issue in the process management subsystem.

Hi! I’m here to help you understand CVE-2026-102006. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70