HIGH 8.4 NVD

CVE-2026-49428

Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. These operations are not pe

Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges.

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:44.posixshm.asc

Published: 2026-08-19 · Source: NVD · Feed updated: 2026-08-20

This high severity vulnerability with a CVSS score of 8.4 was published on 2026-08-19 via NVD.

vulnfeed aggregates 11644 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.