11 matches found
OpenBSD Resource Management Vulnerability (CNVD-2026-26371)
OpenBSD is a Unix-like operating system that focuses on security and code quality. There is a resource management vulnerability in OpenBSD. This vulnerability stems from the use of the syssem.get function in sys/kern/sysvsem.c, where a memory error occurs due to a context switch after tsleep. An...
CVE-2026-57589
sys/kern/sysvsem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in syssemget...
EUVD-2026-39156
sys/kern/sysvsem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in syssemget...
CVE-2026-57589
sys/kern/sysvsem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in syssemget...
CVE-2026-57589
The CVE-2026-57589 entry concerns OpenBSD (through 7.9) with a use-after-free in sys/kern/sysv_sem.c that enables a local privilege escalation to root . The root cause is a context switch use-after-free after tsleep in sys_semget(). This applies to the OpenBSD kernel code path handling System V s...
CVE-2026-57589
sys/kern/sysvsem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in syssemget...
PT-2026-52158
Name of the Vulnerable Software and Affected Versions OpenBSD versions prior to 7.10 Description A use-after-free issue exists in the sys/kern/sysv sem.c file. This occurs during a context switch following the tsleep function within sys semget, which can be exploited to allow local privilege...
MAL-2025-47506 Malicious code in tsleep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed66f2b93e98b57d021fd0653e70765b4b209fdcd11df8fc84d9ef9081c32b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tsleep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed66f2b93e98b57d021fd0653e70765b4b209fdcd11df8fc84d9ef9081c32b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in tsleep
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview tsleep is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...