An unprivileged local user may be able to exploit these races to escalate privileges.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| FreeBSD | FreeBSD | unknown |
|
No data.
No data.
No data available yet.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 15 Oct 2026 06:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's table is copied before knotes are transferred, a concurrent thread in the parent could grow the parent's table and register knotes with file descriptor numbers beyond the end of the child's table, causing an out-of-bounds read. An unprivileged local user may be able to exploit these races to escalate privileges. | |
| Title | Memory safety bugs in kqueue copy-on-fork implementation | |
| Weaknesses | CWE-125 CWE-362 |
|
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: freebsd
Published:
Updated: 2026-10-15T06:31:27.858Z
Reserved: 2026-06-29T01:40:17.499Z
Link: CVE-2026-58100
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-15T07:18:02.490
Modified: 2026-10-15T07:18:02.490
Link: CVE-2026-58100
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-15T11:30:18Z