CVE-2026-58099

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description A race condition exists when copying knotes from a parent kqueue to a child. The copy code fails to correctly exclude marker knotes, which are used internally to track list traversal position, before marking them as in-flux and releasing the kqueue lock. If a separate thread frees a marker while the lock is released, the subsequent in-flux decrement operation occurs on freed memory. An unprivileged local user could exploit this behavior to escalate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.