HomeDefectsLIN1023-18386
Fixed

LIN1023-18386 : Security Advisory - libxml2 - CVE-2026-0992

Created: Jan 15, 2026    Updated: Jan 23, 2026
Resolved Date: Jan 22, 2026
Found In Version: 10.23.30.2
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.

CVEs