← Back

CVE-2026-49427

nvd nist
Published: Aug 19, 2026Modified: Sep 1, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile(2) transmitted such an object with the SF_NOCACHE flag, it freed the underlying pages after transmission even though existing mappings still referred to them. An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges.

Affected (38)

Products: Freebsd: Freebsd
Freebsd
1 product
Freebsd
Configuration A
38 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
Version 14.3
Freebsd
Version 14.3 p10
Freebsd
Version 14.3 p11
Freebsd
Version 14.3 p12
Freebsd
Version 14.3 p13
Freebsd
Version 14.3 p14
Freebsd
Version 14.3 p15
Freebsd
Version 14.3 p1
Freebsd
Version 14.3 p2
Freebsd
Version 14.3 p3
Freebsd
Version 14.3 p4
Freebsd
Version 14.3 p5
Freebsd
Version 14.3 p6
Freebsd
Version 14.3 p7
Freebsd
Version 14.3 p8
Freebsd
Version 14.3 p9
Freebsd
Version 14.4
Freebsd
Version 14.4 p1
Freebsd
Version 14.4 p2
Freebsd
Version 14.4 p3
Freebsd
Version 14.4 p4
Freebsd
Version 14.4 p5
Freebsd
Version 14.4 p6
Freebsd
Version 14.4 rc1
Freebsd
Version 15.0
Freebsd
Version 15.0 p10
Freebsd
Version 15.0 p1
Freebsd
Version 15.0 p2
Freebsd
Version 15.0 p3
Freebsd
Version 15.0 p4
Freebsd
Version 15.0 p5
Freebsd
Version 15.0 p6
Freebsd
Version 15.0 p7
Freebsd
Version 15.0 p8
Freebsd
Version 15.0 p9
Freebsd
Version 15.1
Freebsd
Version 15.1 rc2
Freebsd
Version 15.1 rc3-p1

Related CWEs

CWE-826
Premature Release of Resource During Expected Lifetime
The product releases a resource that is still intended to be used by itself or another actor.

References (1)

Source: secteam@freebsd.org
Vendor Advisory

Timeline

No history available yet.