In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of that maximum priority wasn't performed, allowing, as a result, to obtain a thread with higher priority than expected and causing a possible denial of service.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 5.7 · eclipseNVD modified 2026-10-08 12:10
Affected (CPE criteria) 1
cpe:2.3:a:eclipse:threadx:*:*:*:*:*:*:*:*
References 1
- https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-w8rw-fqgj-9r49 Exploit, Third Party Advisory