Out-of-bounds write in FreeBSD - CVE-2026-58088
Published: July 29, 2026 / Updated: July 30, 2026
Vulnerability identifier: #VU140488
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-58088
CWE-ID: CWE-787
Exploitation vector: Local access
Exploit availability:
No public exploit available
Affected software:
FreeBSD
FreeBSD
Detailed vulnerability description
The vulnerability allows a local user to escalate privileges.
The vulnerability exists due to an out-of-bounds write in the ELF core dump code when counting and populating core dump program headers for dumpable VM map entries. A local user can share an address space with a process that dumps core and mutate the VM map between the two passes to escalate privileges.
Exploitation requires sharing an address space with the target process via rfork(2).
How to mitigate CVE-2026-58088
Install security update from vendor's website.