Security Advisory

CVE-2026-49428

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-19 05:57:04

Last updated 2026-08-20 03:55:45

Assigner freebsd

CVSS score 8.4

State PUBLISHED

Description

Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges.

← Browse all CVEs View on cve.org ↗