CVE-2026-58088

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A race condition exists in the ELF core dump code. The system counts dumpable VM map entries and allocates a buffer for program headers, then iterates over the map again to populate them. A process sharing the address space via the rfork(2) function can mutate the map between these two passes, resulting in an out-of-bounds write on the kernel heap. This allows an unprivileged local user sharing an address space with a process that dumps core to potentially achieve privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.