8.5
Élevée
CVE-2026-102710 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ENABLE_EVENT_TRACE, the Module Manager lets a…
Description
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ENABLE_EVENT_TRACE, the Module Manager lets a user-mode, memory-protected module register any function pointer as the kernel's trace-buffer-full callback, which the kernel calls from privileged code when the trace buffer wraps. A malicious module can thereby run its own code with kernel privilege, defeating module isolation, or fault the kernel with an invalid pointer.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| eclipse-threadx/threadx | Versions non publiées | |
| Eclipse ThreadX 6.5 | premières → < 6.5.2.202603b | 6.5.2.202603b |
| Eclipse ThreadX 6.0 | 6.0.1 → 6.5.2.202603 | Pas de correctif indiqué |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification