CVE-2026-58089

Name of the Vulnerable Software and Affected Versions OpenBSD hwpmc (affected versions not specified)

Description An issue exists in the hwpmc(4) driver where an inverted check occurs when a process calls execve(2) to execute a setuid or setgid image. This failure to properly detach Performance Monitoring Counters (PMCs) allows an unprivileged local user who has attached PMCs to a process to continue monitoring that process after it executes a setuid or setgid binary, violating the intended security policy.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.