CVE-2026-58094

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A race condition exists in the FIOSSHMLPGCNF ioctl(2) operation used to configure the page size for a largepage shared memory object. The handler fails to hold the rangelock when checking if a page size has already been configured. This allows two concurrent callers to observe an unconfigured object and set conflicting page sizes, resulting in an inconsistent state. An unprivileged local user can exploit this flaw to escalate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.