{"id":"CVE-2026-97686","title":"Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application","summary":"Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Ve…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-772"],"vendor":"Wind River","product":"VxWorks 7","affected":["vxworks_7 VxWorks 7"],"published":"2026-09-28","updated":"2026-09-28","sourceUpdated":"2026-09-28T20:47:20.760","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-97686","references":[{"url":"https://support2.windriver.com/index.php?page=cve&order_by=cve_modified_date&order_way=asc#list","label":"0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-28T19:25:35.769605Z"},"ingestedAt":"2026-09-28T19:19:07.734Z","slug":"CVE-2026-97686","body":"## Overview\n\nWind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09. \n\n\nSecurity Researcher: Zhi Yang Bingren Wu Finding\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}