CVE-2026-58100

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A race condition exists in the kqueue fork copy knote() function where it indexes into the child's file descriptor table using a knote's file descriptor number without performing a bounds check. Since the child's table is copied before knotes are transferred, a concurrent thread in the parent process could expand the parent's table and register knotes with file descriptor numbers that exceed the child's table limits, resulting in an out-of-bounds read. An unprivileged local user could exploit this behavior to escalate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.