Eclipse ThreadX module manager flaws allow privilege escalation and system stalls
ThreadX, an operating system in devices, can be stalled or taken over.
Summary
Several flaws in the Module Manager of the Eclipse ThreadX real-time operating system let module code run with more privilege than it should or stop other threads. Versions 6.0.1 through 6.5.2.202603 are affected.
Affected when
- Module Manager modules in use
- Cortex-M module ports
- event tracing enabled with a kernel trace buffer
What to do
No fixed version is named in the sources. Check that the ThreadX you run is newer than 6.5.2.202603, and read the vendor's advisory.
Products and platforms
CVE IDs
Sources
Times
First published
First seen