Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2026-32848

NetBSD cryptodev Race Condition Double-Free via cryptodev_op()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier on SMP systems. Attackers can exploit mutable per-operation state embedded in the csession struct to corrupt kernel heap memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetBSD src

Default version status: affected

  • 0 to < ec8451efc1565516aba9e7047e1a1a1ce7953a2faffected
pkg:github/NetBSD/src

References