A shared-memory page-size race can escalate privileges
Brief
All supported releases.
Notes
FreeBSD-SA-26:63.posixshm CVE-2026-58094. TOCTOU race. Local privilege escalation. Credits: tsune of GMO Cybersecurity by Ierae, Inc., working with TrendAI Zero Day Initiative.
releng/15.1 a372e73712cf. releng/15.0 cec488c1669b. releng/14.4 840fd9dc7de2. stable/15 5990860ca841, stable/14 6bfd894c8b14. In 15.1-p3, 15.0-p13, and 14.4-p9.
Commit a372e73712cf84b82ca25b5b3a5a56e1baf30435