Eclipse ThreadX up to 6.5.1.202602a Module Manager txm_module_object_pointer_get_extended privileges management

Summaryinfo

A vulnerability was found in Eclipse ThreadX up to 6.5.1.202602a. It has been classified as very critical. This affects the function txm_module_object_pointer_get_extended of the component Module Manager. The manipulation leads to privileges management. This vulnerability is listed as CVE-2026-94023. The attack must be carried out locally. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as very critical, has been found in Eclipse ThreadX up to 6.5.1.202602a. This issue affects the function txm_module_object_pointer_get_extended of the component Module Manager. The manipulation with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

A ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one question about the pointer: does the object lie outside the module's own code and data. That is the policy for *using* an object, and using an object a module does not own is supported and intended — `txm_module_object_pointer_get_extended` searches the system's created objects by name and hands back objects the application created and objects other modules created, so that a module can send to a shared queue, take a shared semaphore or get a shared mutex. Destroying one of those is not sharing it. A module could name any object it had a pointer to and have the privileged dispatcher delete it.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2026-94023 since 09/23/2026. The exploitation is known to be easy. Attacking locally is a requirement. Additional levels of successful authentication are necessary for exploitation. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/20/2026). The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

Upgrading to version 6.5.2.202603 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Eclipse

Name

• ThreadX

Version

• 6.5.1.202602a

License

• open-source

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion