CVE-2026-58084 Kernel stack disclosure via timer_settime(2)

To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

CVE-2026-58084 Kernel stack disclosure via timer_settime(2)

To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

CVE-2026-58084

The FreeBSD kernel is vulnerable to a kernel stack disclosure via the timer_settime(2) system call. The flaw exists because the kernel calls realtimer_gettime() to retrieve previous timer values; however, for timers using CLOCK_TAI , the function may fail if no TAI offset is configured. Because t...

CVE-2026-58084: Use of Uninitialized Resource

To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...