PulseAugur
实时 07:16:47
English(EN) FreeBSD: kernel use-after-free via tty ioctls – CVE-2026-58093 https://www. cve.org/CVERecord?id=CVE-2026- 58093 "The TIOCSCTTY ioctl handler drops the tty lock

FreeBSD 内核漏洞 CVE-2026-58093 允许权限提升

FreeBSD 内核的 tty ioctl 处理程序中发现了一个关键的使用后释放漏洞,标识为 CVE-2026-58093。该漏洞源于一个竞态条件,其中 TIOCSCTTY ioctl 处理程序在重新获取 tty 锁后未能重新验证终端的状态。此缺陷可能允许未经授权的本地用户通过利用该条件将并发销毁的终端链接到调用进程的会话来提升权限。 AI

排序理由 在操作系统内核中发现特定的 CVE 漏洞。[lever_c_demoted from research: ic=1 ai=0.4]

在 Mastodon — fosstodon.org 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →

FreeBSD 内核漏洞 CVE-2026-58093 允许权限提升

本文如何被排名

Signal score
7 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
在操作系统内核中发现特定的 CVE 漏洞。[lever_c_demoted from research: ic=1 ai=0.4]
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Standard
On-topic for AI-industry coverage; kept in the public index.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准

报道来源 [1]

  1. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    FreeBSD:通过 tty ioctls 的内核 use-after-free – CVE-2026-58093 https://www.cve.org/CVERecord?id=CVE-2026-58093 "TIOCSCTTY ioctl 处理程序会释放 tty 锁

    FreeBSD: kernel use-after-free via tty ioctls – CVE-2026-58093 https://www. cve.org/CVERecord?id=CVE-2026- 58093 "The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of …