CVE-2026-113421

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a module's trace-buffer-full callback when the module is stopped and unloaded. With event tracing enabled and a kernel-owned trace buffer still active, a later buffer wrap invokes the callback from privileged...

CVE-2026-113421

Eclipse ThreadX versions 6.0.1 through 6.5.2.202603 are vulnerable to a Use After Free (CWE-416) issue within ThreadX Modules . The flaw occurs because the system fails to revoke a module's trace-buffer-full callback upon stopping and unloading the module. If event tracing is enabled and a kernel...