PulseAugur
EN
LIVE 07:20:50

FreeBSD kernel vulnerability CVE-2026-58093 allows privilege escalation

By PulseAugur Editorial · [1 sources] ·

A critical use-after-free vulnerability, identified as CVE-2026-58093, has been discovered in the FreeBSD kernel's tty ioctl handlers. The vulnerability arises from a race condition where the TIOCSCTTY ioctl handler fails to revalidate the terminal's state after reacquiring the tty lock. This flaw could allow an unprivileged local user to escalate privileges by exploiting the condition to link a concurrently destroyed terminal to the calling process's session. AI

RANK_REASON Discovery of a specific CVE vulnerability in an operating system kernel. [lever_c_demoted from research: ic=1 ai=0.4]

Read on Mastodon — fosstodon.org →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

FreeBSD kernel vulnerability CVE-2026-58093 allows privilege escalation

How we ranked this

Signal score
7 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Discovery of a specific CVE vulnerability in an operating system kernel. [lever_c_demoted from research: ic=1 ai=0.4]
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Standard
On-topic for AI-industry coverage; kept in the public index.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    FreeBSD: kernel use-after-free via tty ioctls – CVE-2026-58093 https://www. cve.org/CVERecord?id=CVE-2026- 58093 "The TIOCSCTTY ioctl handler drops the tty lock

    FreeBSD: kernel use-after-free via tty ioctls – CVE-2026-58093 https://www. cve.org/CVERecord?id=CVE-2026- 58093 "The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of …

    LINKS cve.org/CVERecord ctftime.org/…/224122 gmo-cybersecurity.com nvd.nist.gov/…/CVE-2026-58093 reviews.freebsd.org/D59126 github.com/…/b207f754c7709212381eda8c91db… cve.org/CVERecord github.com/…/freebsd-src

RELATED ENTITIES

RELATED TOPICS