CVE-2026-94192: CWE-416 Use After Free in Eclipse Foundation Eclipse ThreadX

Eclipse ThreadX contains a use-after-free vulnerability (CWE-416) in its module management system. The ThreadX module allocates kernel object control blocks from the Module Manager's object pool and can request deallocation via txm_module_object_deallocate. However, the deallocation process only releases the memory but does not remove the object from the created list or scheduling lists. Consequently, kernel objects such as threads and timers remain active and schedulable, while their underlying memory may be reallocated for other uses, leading to use-after-free conditions and potential system instability or compromise.

This vulnerability can lead to memory corruption and unpredictable behavior in the affected system. Since kernel objects remain active after their memory is freed, attackers or faulty modules could exploit this to cause crashes, data corruption, or potentially escalate privileges within the system. The CVSS 4.0 score of 8.5 reflects a high impact with local attack vector and low complexity, requiring low privileges but no user interaction.

No explicit patch or remediation is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the affected ThreadX module and monitor for updates from the Eclipse Foundation.