An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| FreeBSD | FreeBSD | unknown |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Wed, 19 Aug 2026 06:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile(2) transmitted such an object with the SF_NOCACHE flag, it freed the underlying pages after transmission even though existing mappings still referred to them. An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges. | |
| Title | posixshm: largepage shared memory objects not explicitly wired | |
| Weaknesses | CWE-826 | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: freebsd
Published:
Updated: 2026-08-19T05:56:53.494Z
Reserved: 2026-05-29T20:24:28.616Z
Link: CVE-2026-49427
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-08-19T06:17:41.977
Modified: 2026-08-19T06:17:41.977
Link: CVE-2026-49427
Redhat
No data.
OpenCVE Enrichment
No data.