ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
ZDI disclosed FreeBSD kernel shared-memory TOCTOU bug CVE-2026-58094 enabling local privilege escalation.
The Zero Day Initiative published ZDI-26-785, a time-of-check time-of-use flaw in FreeBSD kernel shared memory tracked as CVE-2026-58094. A local attacker who can already execute low-privileged code can escalate privileges on affected systems. ZDI assigned a CVSS score of 7.8. The advisory does not report active exploitation.
40