CVE-2026-102710
CVSS Score
0.0
EPSS Score
0.1%
EPSS Percentile
1th
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ENABLE_EVENT_TRACE, the Module Manager lets a user-mode, memory-protected module register any function pointer as the kernel's trace-buffer-full callback, which the kernel calls from privileged code when the trace buffer wraps. A malicious module can thereby run its own code with kernel privilege, defeating module isolation, or fault the kernel with an invalid pointer.
| CWE | CWE-269 CWE-822 |
| Vendor | eclipse foundation |
| Product | eclipse threadx |
| Published | Sep 29, 2026 |
| Last Updated | Nov 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for eclipse foundation eclipse threadx
Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse threadx are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Eclipse Foundation / Eclipse ThreadX
6.0.1 ≤ 6.5.2.202603
References
Credits
🔍 SounLabs Frédéric Desbiens