CVE-2026-102724:詳細資料

CVE-2026-102724

2026-09-29
18h17 +00:00
Memory Corruption
2026-11-04
11h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, evicting the last attribute in an MRP participant's list writes through a null successor pointer. An unauthenticated station on the same Layer 2 segment can fault the MRP worker thread by declaring one MSRP attribute and withdrawing it, and ordinary withdrawals by legitimate stations reach the same path.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

參考資料