CVE-2026-58083

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A use-after-free issue exists in the kernel during the copying of knotes during a fork operation. A knote with a timer-based filter may fire and be enqueued on the kqueue active list before the copy process completes. Because the copy routine fails to account for this and does not hold appropriate locks while reading knote state, the new knote could be enqueued a second time, leading to active list corruption and race conditions. An unprivileged local user can exploit this to potentially achieve privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.