Race Condition Vulnerability in FreeBSD Shared Memory Configuration
CVE-2026-58094

7.8HIGH

Key Information:

Vendor

FreeBSD

Status
FreeBSD
Vendor
CVE Published:
26 August 2026

What is CVE-2026-58094?

A race condition exists in the configuration of shared memory page sizes in FreeBSD, specifically within the FIOSSHMLPGCNF ioctl(2) operation. This vulnerability arises when two concurrent processes attempt to configure the page size for a shared memory object without appropriate synchronization mechanisms in place, leading to potential conflicts. Unprivileged local users can exploit this flaw to escalate their privileges, placing system integrity at risk. Proper locking protocols would prevent this issue by ensuring that only one process can configure the shared memory object at a time.

Affected Version(s)

FreeBSD 15.1-RELEASE

FreeBSD 15.0-RELEASE

FreeBSD 14.4-RELEASE

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:63....
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

tsune of GMO Cybersecurity by Ierae, Inc. working with TrendAI Zero Day Initiative
.