https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:28:51 +0000 https://cve.radiocsirt.org/vuln/cve-2026-49418 <p><strong>Affected:</strong> FreeBSD</p> <p>When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager&#39;s page list. A subsequent page fault will cause the fault handler to re-insert the page into the object&#39;s list. This corrupts the list, and on object destruction the page is freed twice.</p> <p>An unprivileged local user with access to a device that provides memory-mapped I/O can trigger a use-after-free in the kernel, though this is limited to a pool of objects (&#34;fictitious pages&#34;) that are never recycled for a different purpose. It may be possible to exploit this to escalate privileges.</p> <p><strong>Affected:</strong> FreeBSD</p> <p>When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager&#39;s page list. A subsequent page fault will cause the fault handler to re-insert the page into the object&#39;s list. This corrupts the list, and on object destruction the page is freed twice.</p> <p>An unprivileged local user with access to a device that provides memory-mapped I/O can trigger a use-after-free in the kernel, though this is limited to a pool of objects (&#34;fictitious pages&#34;) that are never recycled for a different purpose. It may be possible to exploit this to escalate privileges.</p> https://cve.radiocsirt.org/vuln/cve-2026-49418