← back
CVE-2026-57589

CVE-2026-57589

CVSS 7.4 HIGHEPSS 0.1%CWE-416
sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
OpenBSD · OpenBSD

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/openbsd/src/commit/1957873d2063db11dab780eca75b5e629d1e838dhttps://openai.com/index/patch-the-planet/