CVE-2026-58091highCWE-416

CVE-2026-58091: falha de alta gravidade em FreeBSD

Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FreeBSD

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.8epss 0.2%
The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking a channel would block, it releases the sync group list lock and sleeps. Upon reawakening, it is possible that the sync group structure is freed, but the implementation did not handle this possibility. On a system with a multiple audio devices, an unprivileged local user can exploit this use-after-free to escalate privileges.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
FreeBSD · FreeBSD
CVEs relacionadas — FreeBSD

No mesmo produto, das mais perigosas para as menos.

CVE-2018-17157—CVE-2018-17157EPSS 24.2%CVE-2017-1084—CVE-2017-1084EPSS 15.3%CVE-2025-14558HIGHRemote code execution via ND6 Router AdvertisementsEPSS 6.7%CVE-2019-5600—CVE-2019-5600EPSS 4.9%CVE-2018-17158—CVE-2018-17158EPSS 4.4%CVE-2018-6918—CVE-2018-6918EPSS 4.2%