---
id: CVE-2026-102006
title: >-
  In Wind River VxWorks 7 prior to 26.09, specific system call arguments can
  result in the process management subsystem failing to properly release
  allocated kernel memory before terminating the calling application
summary: >-
  In Wind River VxWorks 7 prior to 26.09, specific system call arguments can
  result in the process management subsystem failing to properly release
  allocated kernel memory before terminating the calling application. Fixed in
  Version 26.09
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-401
vendor: Wind River Systems Inc
product: VxWorks 7
affected:
  - vxworks_7 VxWorks 7
published: '2026-09-28'
updated: '2026-09-28'
sourceUpdated: '2026-09-28T21:17:13.740'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-102006'
references:
  - url: 'https://support2.windriver.com/index.php?page=cve'
    label: 0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-28T21:20:54.778Z'
---

## Overview

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.