ZDI discloses two FreeBSD kernel local privilege-escalation flaws

ZDI published FreeBSD kernel bugs CVE-2026-58093 (kqueue UAF, CVSS 8.8) and CVE-2026-58094 (shared-memory TOCTOU, CVSS 7.8) for local privilege escalation.

The Zero Day Initiative published two FreeBSD kernel advisories on 2026-10-16, ZDI-26-784 and ZDI-26-785. ZDI-26-784 tracks CVE-2026-58093, a use-after-free in the kernel kqueue implementation that ZDI rated CVSS 8.8 and that allows local privilege escalation. ZDI-26-785 tracks CVE-2026-58094, a time-of-check time-of-use flaw in kernel shared memory that ZDI rated CVSS 7.8 and that also allows local privilege escalation. In both cases the attacker must already be able to run low-privileged code. Neither advisory mentions in-the-wild or active exploitation, and the two reports do not disagree.

• On 2026-10-16 the Zero Day Initiative published ZDI-26-784 and ZDI-26-785, both local privilege-escalation flaws in the FreeBSD kernel.
• ZDI-26-784 (CVE-2026-58093) is a use-after-free in the FreeBSD kernel kqueue implementation, rated CVSS 8.8.
• ZDI-26-785 (CVE-2026-58094) is a time-of-check time-of-use flaw in FreeBSD kernel shared memory, rated CVSS 7.8.
• Both require an attacker who can already execute low-privileged code on the affected system.
• Neither advisory reports in-the-wild or active exploitation.