CVE-2026-58091

CVE-2026-58091 is a kernel use-after-free in FreeBSD's sound(4) driver , triggered via the SNDCTL_DSP_SYNCSTART ioctl. When locking a channel in a sync group would block, the implementation releases the sync group list lock and sleeps; upon reawakening, the sync group structure may have been free...