CVE-2026-102724:详情

CVE-2026-102724

2026-09-29
18h17 +00:00
Memory Corruption
2026-11-04
11h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, evicting the last attribute in an MRP participant's list writes through a null successor pointer. An unauthenticated station on the same Layer 2 segment can fault the MRP worker thread by declaring one MSRP attribute and withdrawing it, and ordinary withdrawals by legitimate stations reach the same path.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

参考资料