---
id: CVE-2026-97686
title: >-
  Wind River VxWorks 7 prior to 26.09, specific system call arguments can result
  in the IPNET subsystem failing to properly release allocated kernel memory and
  system file descriptors before terminating the calling application
summary: >-
  Wind River VxWorks 7 prior to 26.09, specific system call arguments can result
  in the IPNET subsystem failing to properly release allocated kernel memory and
  system file descriptors before terminating the calling application. Fixed in
  Ve…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-772
vendor: Wind River
product: VxWorks 7
affected:
  - vxworks_7 VxWorks 7
published: '2026-09-28'
updated: '2026-09-28'
sourceUpdated: '2026-09-28T20:47:20.760'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97686'
references:
  - url: >-
      https://support2.windriver.com/index.php?page=cve&order_by=cve_modified_date&order_way=asc#list
    label: 0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-28T19:25:35.769605Z'
ingestedAt: '2026-09-28T19:19:07.734Z'
---

## Overview

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09. 


Security Researcher: Zhi Yang Bingren Wu Finding

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.