vulnerability context

CVE-2026-57589

CVSS 7.4 HIGHEPSS 2.6%CWE-416

sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().

Published 2026-06-25 · last modified 2026-06-26

details

CISA KEV status: Not in catalog
CVSS v3: 7.4 / HIGH
CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 2.6% percentile (score 0.0013)
CWE: CWE-416

View on NVD → · cve.org

source mentions 2

[The Lobste.rs RSS feed] OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root (CVE-2026-57589) htt...Bluesky · 1h ago
[CVE Alerts ] CVE-2026-57589 - OpenBSD Use-After-Free Privilege Escalation CVE ID : CVE-2026-57589 Published : June 25, 2026, 1...Bluesky · 13d ago

source consensus

Bluesky2×

Want the 3-bullet summary of CVE-2026-57589, plus webhook alerts when KEV is updated? Pro is $10/mo.

Open in reader See Pro →