VULNERABILITY INTELLIGENCE

CVE-2026-49428

CVSS score8.4 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-08-19
Last modified2026-09-01
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges.

Weakness classification

  • secteam@freebsd.org: CWE-915

Primary references