Improper Resource Management in ThreadX Module Affects Eclipse Foundation

CVE-2026-94023

What is CVE-2026-94023?

A vulnerability exists in the ThreadX module where improper resource management can occur via the Module Manager's dispatch layer. This flaw allows a module to delete kernel objects it does not own by improperly leveraging the system's management features. The txm_module_object_pointer_get_extended function facilitates this by enabling modules to interact with shared objects but fails to adequately prevent unauthorized deletion of these objects. Consequently, this could lead to unexpected behavior or resource conflicts, posing risks to system stability and integrity.

References