CVE-2026-49418

creationtimestamp| type| source ---|---|--- 2026-08-19 05:36:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gxqvl226j6p4e...

CVE-2026-49418

On FreeBSD, calling msync(MS_INVALIDATE) on a mapping of an unmanaged device object leaves invalidated pages in the pager's page list; a subsequent page fault re-inserts them, corrupting the list and causing a double-free on object destruction. An unprivileged local user with memory-mapped I/O ac...