What is CVE-2026-115653 in Eclipse ThreadX?
CVE-2026-115653 is a security vulnerability identified in Eclipse ThreadX affecting versions 6.0.1 through 6.5.2.202603 specifically within Cortex-M module ports. This issue carries a CVSS score of 7.0 and involves flaws categorized under CWE-787 and CWE-822.
El issues is similar in impact to other privilege escalation vectors like CVE-2026-58946, CVE-2026-58957, or memory management flaws such as CVE-2026-59044 tracked in security advisories. You can review more details directly in the official [[https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-c38r-v552-gh5g|GitHub security advisory]] and [[https://gitlab.eclipse.org/security/cve-assignment/-/work_items/503|GitLab work items]] repository trackers.
How does the vulnerability affect Cortex-M architectures?
The vulnerability resides in the PendSV handler of the Cortex-M module ports, where preempted user-mode module thread registers are saved in privileged mode. The handler extracts addresses from the thread's stack pointer without validating that pointer against the thread's actual stack boundaries.
As a result, a memory-protected user-mode module can write up to nine words—or up to 25 words when floating-point state is active—into memory immediately beneath any region it is authorized to write to, as well as read back the stored contents.
How can I protect my systems against this flaw?
Administrators and developers utilizing Eclipse ThreadX on Cortex-M must implement immediate mitigation strategies to prevent unauthorized memory manipulation and potential kernel-level privilege escalation.
Follow these mitigation steps to secure your environment:
Verify your current Eclipse ThreadX version to check if it falls within 6.0.1 and 6.5.2.202603.
Consult the [[https://nvd.nist.gov/vuln/detail/CVE-2026-115653|NIST NVD database]] and [[https://www.cve.org/CVERecord?id=CVE-2026-115653|CVE.org entry]] for official patch releases from the maintainers.