Wind River Support Network

HomeDefectsLIN1023-37791

Acknowledged

LIN1023-37791 : Security Advisory - libxml2 - CVE-2026-76781

Created: Oct 23, 2026 Updated: Oct 27, 2026

Resolved Date: Oct 23, 2026

Found In Version: 10.23.30.2

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a `nextCatalog` element lacks its mandatory `catalog` attribute, leading to the application crashing and causing a Denial of Service (DoS).
Data source: Red Hat, Inc. (secalert@redhat.com)