CVE-2026-49427
posixshm: largepage shared memory objects not explicitly wired
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile(2) transmitted such an object with the SF_NOCACHE flag, it freed the underlying pages after transmission even though existing mappings still referred to them. An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges.
| CWE | CWE-826 |
| Vendor | freebsd |
| Product | freebsd |
| Published | Aug 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for freebsd freebsd
Be the first to know when new unknown vulnerabilities affecting freebsd freebsd are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
FreeBSD / FreeBSD
15.1-RELEASE < p1 15.0-RELEASE < p11 14.4-RELEASE < p7 14.3-RELEASE < p16
References
Credits
Chris Jarrett-Davies of the OpenAI Codex Security Team