Wind River VxWorks 7 < 26.09 Multiple Vulnerabilities

According to its self-reported version, the remote device is running Wind River VxWorks 7 prior to release 26.09. It is, therefore, affected by multiple vulnerabilities: - In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory...

CVE-2026-102006

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...

CVE-2026-102006

Wind River VxWorks 7 prior to version 26.09 is vulnerable to a memory management flaw where specific system call arguments cause the process management subsystem to fail to release allocated kernel memory before an application terminates. This can lead to a high availability impact as kernel memo...

CVE-2026-102004

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

EUVD-2026-88467

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

CVE-2026-102004 VxWorks 7

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

CVE-2026-102004 VxWorks 7

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

CVE-2026-102004

Wind River VxWorks 7 versions prior to 26.09 are vulnerable to a memory corruption flaw within the memory management subsystem . The vulnerability is triggered by providing specific arguments to certain system calls . This issue can lead to high impacts on confidentiality, integrity, and availabi...

CVE-2026-102004: Out-of-bounds Write

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

PT-2026-102336

Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description Specific system call arguments can lead to memory corruption within the memory management subsystem. Recommendations Update to version 26.09...

Oracle Linux 10 : kernel (ELSA-2026-30129)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-30129 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1816)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1816 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update CVE-2026-23171 In the Linux kernel, the following...

The vulnerability of the handle_misaligned_load() function in the arch/riscv/kernel/traps_misaligned.c module of the module management subsystem for the RISC-V architecture-based Linux operating system allows a attacker to access protected information.

The vulnerability of the handlemisalignedload function in the arch/riscv/kernel/trapsmisaligned.c module of the module management subsystem for the RISC-V architecture-based Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to...

PT-2025-44926

Name of the Vulnerable Software and Affected Versions versions prior to November 4, 2025 Description An information disclosure issue exists when a user-level driver performs QFPROM read or write operations on Fuse regions. The issue involves missing authentication for a critical function in SMSS...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible deadlock issue in the Bluetooth:MGMT subsystem...

The vulnerability of the pfn_valid() function in the include/linux/mmzone.h module of the Linux kernel’s memory management subsystem allows a attacker to cause a service failure.

The vulnerability of the pfnvalid function in the include/linux/mmzone.h module of the Linux memory management subsystem is related to an infinite recursion. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2024-22006

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device...

CVE-2024-22006

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device...

CVE-2024-22006: Out-of-bounds Read

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device...

CVE-2024-1312

A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same time with a fail in the masprevslot function. This issue could allow a local user to crash the system...