77 matches found
fsmon
fsmon Low level filesystem monitor utility for Linux, Android, iOS and macOS. Author : pancake @ nowsecure License : MIT Designed for System administrators and incident responders Security researchers and forensic analysts Developers debugging I/O-heavy applications Reverse engineers interested i...
CVE-2026-58099
When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...
CVE-2026-58100
The FreeBSD kernel is vulnerable to a memory safety issue in the kqueue copy-on-fork implementation. Specifically, the kqueue_fork_copy_knote() function performs an out-of-bounds read because it indexes into the child's file descriptor table using a knote's file descriptor number without a proper...
CVE-2026-58100 Memory safety bugs in kqueue copy-on-fork implementation
kqueueforkcopyknote indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's table is copied before knotes are transferred, a concurrent thread in the parent could grow the parent's table and register knotes with file...
CVE-2026-58100 Memory safety bugs in kqueue copy-on-fork implementation
kqueueforkcopyknote indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's table is copied before knotes are transferred, a concurrent thread in the parent could grow the parent's table and register knotes with file...
CVE-2026-58099
The FreeBSD operating system (specifically versions 15.1 , 15.1-STABLE , and 15.1-RELEASE-p4 ) is vulnerable to a memory safety bug in the kqueue copy-on-fork implementation. The root cause is a race condition where the copy code fails to exclude internal marker knotes before marking them as in-f...
CVE-2026-58099 Memory safety bugs in kqueue copy-on-fork implementation
When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...
EUVD-2026-101856
When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...
CVE-2026-58099 Memory safety bugs in kqueue copy-on-fork implementation
When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...
PT-2026-114794
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition exists in the kqueue fork copy knote function where it indexes into the child's file descriptor table using a knote's file descriptor number...
PT-2026-114793
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A race condition exists when copying knotes from a parent kqueue to a child. The copy code fails to correctly exclude marker knotes, which are used internally t...
Security Bulletin:Netty Unbounded File Descriptor Leak in Domain Socket Receives
Summary Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, nettyunixsocketrecvFd sets msgcontrol to char controlCMSGSPACEsizeofint line 940 — 24 bytes on 64-bit Linux. A peer-sent SCMRIGHTS cmsg carrying two...
FreeBSD : FreeBSD -- Memory safety bugs in kqueue copy-on-fork implementation (d725b228-bccc-11f1-906f-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d725b228-bccc-11f1-906f-bc241121aa0a advisory. When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude...
FreeBSD -- Memory safety bugs in kqueue copy-on-fork implementation
Problem Description: When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was droppe...
FreeBSD Security Advisory - FreeBSD-SA-26:65.kqueue
FreeBSD Security Advisory - Memory safety bugs in kqueue copy-on-fork implementation. An unprivileged local user may be able to exploit these races to escalate privileges...
FreeBSD-SA-26:65.kqueue
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:65.kqueue Security Advisory The FreeBSD Project Topic: Memory safety bugs in kqueue copy-on-fork implementation Category: core Module: kqueue Announced:...
CVE-2026-58083
While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was complete. The copy routine did not account for this and could enqueue the new knote a second time, corrupting the active list. In addition,...
CVE-2026-58083 Use-after-free in kqueue copy-on-fork
While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was complete. The copy routine did not account for this and could enqueue the new knote a second time, corrupting the active list. In addition,...
EUVD-2026-62351
While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was complete. The copy routine did not account for this and could enqueue the new knote a second time, corrupting the active list. In addition,...
CVE-2026-58083
A use-after-free vulnerability exists in the FreeBSD kernel within the kqueue event notification facility. During a fork operation using KQUEUE_CPONFORK mode, the kernel's process of copying knotes fails to account for timer-based filters firing before the copy is complete. This allows a knote to...