Beveiligingsadvies

CVE-2026-5398

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-22 02:23:56

Laatst bijgewerkt 2026-04-23 03:56:10

Toegewezen door freebsd

CVSS-score 8.4

Status PUBLISHED

Beschrijving

The implementation of TIOCNOTTY failed to clear a back-pointer from the structure representing the controlling terminal to the calling process' session. If the invoking process then exits, the terminal structure may end up containing a pointer to freed memory. A malicious process can abuse the dangling pointer to grant itself root privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗