Improper Memory Management Vulnerability in ThreadX Module from Express Logic

CVE-2026-94192

What is CVE-2026-94192?

In the ThreadX module by Express Logic, the memory management system fails to reliably manage kernel object control blocks. The Module Manager allocates these control blocks from its object pool but can inadvertently return these blocks to memory allocation processes while they are still in use. This improper deallocation allows an active object to remain in the system despite being marked as available for reuse, which can lead to unforeseen behavior and system instability. In particular, this vulnerability can result in various issues including race conditions and compromised scheduling integrity.

References