CVE-2026-49418

creationtimestamp| type| source ---|---|--- 2026-08-19 05:36:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gxqvl226j6p4e...

CVE-2026-49418 Use-after-free in device pager page list

When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager's page list. A subsequent page fault will cause the fault handler to re-insert the page into the object's list. This corrupts the list, a...

CVE-2026-49418

A use-after-free vulnerability exists in the FreeBSD kernel's virtual memory subsystem. When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, physical pages are marked invalid but remain in the pager's page list. A subsequent page fault triggers the fault handler to re-i...