Race Condition Vulnerability in FreeBSD Shared Memory Configuration

CVE-2026-58094

What is CVE-2026-58094?

A race condition exists in the configuration of shared memory page sizes in FreeBSD, specifically within the FIOSSHMLPGCNF ioctl(2) operation. This vulnerability arises when two concurrent processes attempt to configure the page size for a shared memory object without appropriate synchronization mechanisms in place, leading to potential conflicts. Unprivileged local users can exploit this flaw to escalate their privileges, placing system integrity at risk. Proper locking protocols would prevent this issue by ensuring that only one process can configure the shared memory object at a time.

References