CVE-2026-58099
— UNSCOREDPublished 2026-10-15 · Updated 2026-10-16
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used internally to track list traversal position) before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent in-flux decrement operated on freed memory. An unprivileged local user may be able to exploit these races to escalate privileges.
Weaknesses
CWE-362, CWE-416
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100805
- HIGHCVE-2026-102211
- MEDIUMCVE-2026-109719
- MEDIUMCVE-2026-109765
- HIGHCVE-2026-69736
- HIGHCVE-2026-69763
- HIGHCVE-2026-69766
- HIGHCVE-2026-69830
Related by shared AI tags and CWE weakness class. Browse the full archive.