CVE-2026-58094

The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...

CVE-2026-58094

FreeBSD 's posixshm module contains a TOCTOU race in the FIOSSHMLPGCNF ioctl(2) handler, which configures the page size for largepage shared memory objects. The handler checked whether a page size was already configured without holding the rangelock , allowing two concurrent callers to both obser...