Vulnerability in Wind River VxWorks 7

[ Description ]Official description

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund28 Sep 2026WID-SEC-2026-3624

  Wind River VxWorks 7: Multiple vulnerabilities Translated from German

  CVE-2026-102004CVE-2026-97686CVE-2026-102005+1 more CVEs

[ References ]References

• support2.windriver.com/index.php