fsmon

fsmon Low level filesystem monitor utility for Linux, Android, iOS and macOS. Author : pancake @ nowsecure License : MIT Designed for System administrators and incident responders Security researchers and forensic analysts Developers debugging I/O-heavy applications Reverse engineers interested i...

FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of FreeBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

CVE-2026-58099

When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...

CVE-2026-58100

The FreeBSD kernel is vulnerable to a memory safety issue in the kqueue copy-on-fork implementation. Specifically, the kqueue_fork_copy_knote() function performs an out-of-bounds read because it indexes into the child's file descriptor table using a knote's file descriptor number without a proper...

CVE-2026-58100 Memory safety bugs in kqueue copy-on-fork implementation

kqueueforkcopyknote indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's table is copied before knotes are transferred, a concurrent thread in the parent could grow the parent's table and register knotes with file...

CVE-2026-58100 Memory safety bugs in kqueue copy-on-fork implementation

kqueueforkcopyknote indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's table is copied before knotes are transferred, a concurrent thread in the parent could grow the parent's table and register knotes with file...

CVE-2026-58099 Memory safety bugs in kqueue copy-on-fork implementation

When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...

CVE-2026-58099

When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...

CVE-2026-58099

The FreeBSD operating system (specifically versions 15.1 , 15.1-STABLE , and 15.1-RELEASE-p4 ) is vulnerable to a memory safety bug in the kqueue copy-on-fork implementation. The root cause is a race condition where the copy code fails to exclude internal marker knotes before marking them as in-f...

CVE-2026-58099 Memory safety bugs in kqueue copy-on-fork implementation

When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...

EUVD-2026-101856

When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...

PT-2026-114793

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A race condition exists when copying knotes from a parent kqueue to a child. The copy code fails to correctly exclude marker knotes, which are used internally t...

PT-2026-114794

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition exists in the kqueue fork copy knote function where it indexes into the child's file descriptor table using a knote's file descriptor number...

RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety

tokio::io::unix::AsyncFd provides safe constructors new, withinterest, trynew, and trywithinterest that accept any T: AsRawFd rather than requiring proof of ownership or validity of the file descriptor. Because RawFd implements AsRawFd, safe code can construct an AsyncFd from an arbitrary or clos...

`AsyncFd::new` and related constructors violate I/O safety

tokio::io::unix::AsyncFd provides safe constructors new, withinterest, trynew, and trywithinterest that accept any T: AsRawFd rather than requiring proof of ownership or validity of the file descriptor. Because RawFd implements AsRawFd, safe code can construct an AsyncFd from an arbitrary or clos...

RHLW-2026-778FAAA627FD5B22 Lightwell Security Advisory: netty-transport-native-kqueue 4.1.100.Final-rhlw-00001

Red Hat Lightwell has released io.netty:netty-transport-native-kqueue 4.1.100.Final-rhlw-00001 with a backported security fix. CVE-2026-45536: Netty: Unix-socket fd receive leaks descriptors when peer sends two at once This patched artifact is a drop-in replacement for...

Security Bulletin:Netty Unbounded File Descriptor Leak in Domain Socket Receives

Summary Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, nettyunixsocketrecvFd sets msgcontrol to char controlCMSGSPACEsizeofint line 940 — 24 bytes on 64-bit Linux. A peer-sent SCMRIGHTS cmsg carrying two...

FreeBSD : FreeBSD -- Memory safety bugs in kqueue copy-on-fork implementation (d725b228-bccc-11f1-906f-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d725b228-bccc-11f1-906f-bc241121aa0a advisory. When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude...

FreeBSD-SA-26:65.kqueue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:65.kqueue Security Advisory The FreeBSD Project Topic: Memory safety bugs in kqueue copy-on-fork implementation Category: core Module: kqueue Announced:...

FreeBSD -- Memory safety bugs in kqueue copy-on-fork implementation

Problem Description: When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was droppe...