ReportizFlow
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request queue. The receiving module's callback thread calls the function pointer in the request without checking that the Module Manager sent it, so the attacker's code runs with the receiving module's privilege; when that module runs in privileged mode, a user-mode module gains privileged execution.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Eclipse |
|
No data.
No data.
References
History
Tue, 03 Nov 2026 10:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Eclipse
Eclipse threadx |
|
| Vendors & Products |
Eclipse
Eclipse threadx |
Tue, 03 Nov 2026 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request queue. The receiving module's callback thread calls the function pointer in the request without checking that the Module Manager sent it, so the attacker's code runs with the receiving module's privilege; when that module runs in privileged mode, a user-mode module gains privileged execution. | |
| Title | User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege | |
| Weaknesses | CWE-269 CWE-862 |
|
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: eclipse
Published: 2026-11-03T08:23:02.270Z
Updated: 2026-11-03T08:23:02.270Z
Reserved: 2026-10-22T08:06:15.022Z
Link: CVE-2026-115231
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-03T09:17:10.797
Modified: 2026-11-03T16:13:37.520
Link: CVE-2026-115231
Redhat
No data.