Feed
Breaking FreeBSD

The sound driver can escalate privileges when two devices start together

Brief

Systems with zero or one sound device are not affected.

Notes

FreeBSD-SA-26:58.sound CVE-2026-58091. Local privilege escalation. Credits: Hazley Samsudin of GovTech CSG.

releng/15.1 48c25324ff1c. releng/15.0 0e8a1c849c3b. releng/14.4 8668302cb731. stable/15 edff72e5f64c, stable/14 e6c1c9215557. Tags 15.1-p3 / 15.0-p13 / 14.4-p9 are this batch.

Commit 48c25324ff1cd2aeb1cb691ce6c907ecb4612c46

Sources