Back to overview

CVE-2026-49412

Description
The kernel handler for IPV6_MSFILTER dropped a serializing lock in order to copy the source-filter list from userspace, then reacquired the lock. During this window another thread could free the multicast filter structure, leaving the handler with a stale pointer to freed memory. An unprivileged local user can exploit this use-after-free to escalate privileges.

Metadata

CVE ID
CVE-2026-49412
State
PUBLISHED
Assigner
freebsd
Reserved
2026-05-29 20:24 UTC
Published
2026-06-27 09:02 UTC
Last updated
2026-06-27 09:02 UTC
Primary CWE
CWE-416
CWE-416: Use After Free
Vendor / Product
FreeBSD / FreeBSD
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
FreeBSD FreeBSD — 15.0-RELEASE < p10, 14.4-RELEASE < p6, 14.3-RELEASE < p15
Weakness (CWE)
CWESourceDescription
CWE-416 cna CWE-416: Use After Free
References (1)
Back to overview