← Back to search

CVE-2026-58942

8.4 HIGH

Published 2026-11-02 · Updated 2026-11-03

AI risk analysis

Summary
A use-after-free vulnerability in the do_fault_around function in memory.c allows local attackers to escalate privileges due to a logic error that frees memory while still referencing it, without requiring user interaction or additional privileges.
Exploitability
Exploitation requires local access and is non-trivial due to the need to precisely trigger the use-after-free condition, but no user interaction or elevated privileges are required.
Blast radius
Successful exploitation could allow a local attacker to gain full system control, compromising confidentiality, integrity, and availability of the affected system.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Apply the vendor patch for kernel version X.Y.Z (if specified); if no fixed version is published, disable memory mapping features involving fault handling or restrict access to the affected subsystem until a patch is available.
use-after-freeprivilege-escalationlocal-exploitkernel

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.