Wind River Support Network

HomeDefectsLIN1021-24963

Fixed

LIN1021-24963 : Security Advisory - apache2 - CVE-2026-33007

Created: May 5, 2026 Updated: Jun 8, 2026

Resolved Date: Jun 8, 2026

Found In Version: 10.21.20.2

Fix Version: 10.21.20.27

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.  Users are recommended to upgrade to version 2.4.67, which fixes this issue.

CVEs

CVE-2026-33007