CVE-2026-58094

FreeBSD 's posixshm module contains a TOCTOU race in the FIOSSHMLPGCNF ioctl(2) handler, which configures the page size for largepage shared memory objects. The handler checked whether a page size was already configured without holding the rangelock , allowing two concurrent callers to both obser...