CVE-2026-57842highCWE-415CWE-416

CVE-2026-57842: fallo de gravedad alta en The NetBSD Foundation NetBSD

NetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlen

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear NetBSD

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.3epss 0.1%
NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path. Any local user able to execute a 32-bit binary on a 64-bit NetBSD system can trigger a kernel panic or memory corruption by calling recvmsg() with msg_iovlen between 9 and IOV_MAX, causing the kernel to access a freed iovec buffer and subsequently free the same allocation a second time.
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
The NetBSD Foundation · NetBSD
CVEs relacionadas — The NetBSD Foundation NetBSD

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-57843MEDIUMNetBSD mm_open() PK_KMEM Flag Kernel Pointer Information DisclosureEPSS 0.1%CVE-2026-53996HIGHNetBSD hdaudio(4) Driver Privilege Bypass Use-After-Free via HDAUDIO_FGRP_SETCONFIG ioctlEPSS 0.1%