CVE-2026-58090

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The SOCK STREAM receive path in the unix socket implementation fails to fully detach control messages from the socket buffer before processing. Certain error paths may free these messages, resulting in freed data mbufs (memory buffers used for network packets) remaining in the receive socket buffer. An unprivileged local user can exploit this use-after-free condition to escalate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.