What is CVE-2026-49428?

CVE-2026-49428 is a high-severity vulnerability in FreeBSD, classified under Improperly Controlled Modification of Dynamically-Determined Object Attributes. CVSS score: 8.4/10. Published 2026-08-19.

How severe is CVE-2026-49428?

High severity. CVSS v3 base score is 8.4 out of 10.

Vulnerability in FreeBSD

CVE-2026-49428

Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges.

Vulnerability class: Mass Assignment

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Freebsd

Weakness classification (CWE)

CWE-915 — Improperly Controlled Modification of Dynamically-Determined Object Attributes

References

secteam@freebsd.org (vendor-advisory)

Frequently asked questions

What is CVE-2026-49428?: CVE-2026-49428 is a high-severity vulnerability in FreeBSD, classified under Improperly Controlled Modification of Dynamically-Determined Object Attributes. CVSS score: 8.4/10. Published 2026-08-19.
How severe is CVE-2026-49428?: High severity. CVSS v3 base score is 8.4 out of 10.