Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-58090

Use-after-free in unix SOCK_STREAM message handling

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
freebsd

Description

The SOCK_STREAM receive path in the unix socket implementation failed to fully detach control messages from the socket buffer before processing them. Some error paths would free those messages, leaving freed data mbufs in the receive socket buffer. An unprivileged local user can exploit this use-after-free to escalate privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeBSD FreeBSD

Default version status: unknown

  • 15.1-RELEASE to < p3affected
  • 15.0-RELEASE to < p13affected

References