Wind River Support Network

HomeDefectsLIN1022-25230

Acknowledged

LIN1022-25230 : Security Advisory - postgresql - CVE-2026-6474

Created: May 15, 2026 Updated: Jun 4, 2026

Found In Version: 10.22.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones.  Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.