CVE-2026-58828

Summary

A use-after-free vulnerability in base.c allows an unprivileged local attacker to trigger a race condition that leads to accessing freed memory, potentially enabling privilege escalation without user interaction.

Exploitability

Exploitation requires local access and precise timing to race the memory free/reuse window; no additional privileges or user interaction are needed.

Blast radius

Successful exploitation could grant an unprivileged local attacker full system compromise (CIA impact high) on affected systems, with no network exposure required.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the vendor patch for CVE-2026-58828 when released; until then, restrict local shell access and disable non-essential services that invoke the affected base.c functions.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.