VulnSocial

CVE-2026-49417Disclosure(freebsd / freebsd)

LOWCVSS 7.0 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memory could then be reused elsewhere while still accessible through the stale mapping. The /dev/dsp device nodes are world-accessible by default. On a system with an audio device, either issue allows an unprivileged local user to read and write kernel memory, which can be used to escalate privileges, potentially gaining full control of the affected system. At a minimum, an attacker can crash the kernel, resulting in a Denial of Service (DoS).

freebsd CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • freebsd

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-06-27)
  • 3 total mentions across 2 days

Affected systems

Vendors
freebsd
Products
freebsd

3 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-10: 1Mentions · 2026-06-27: 2Technical Details · 2026-06-10: 1Technical Details · 2026-06-27: 206-1006-27
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-101
Disclosure1
2026-06-272
Disclosure2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-49417 Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memory could then be reused el… https://www.cve.org/CVERecord?id=CVE-2026-49417 ----- Traducción: CVE-2026-49417 En … http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑49417, describing how an audio buffer may be freed when a device is closed, potentially leading to memory reuse, but no exploitation evidence or patches are provided.

    0000031
    89 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-49417 Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memory could then be reused el… https://www.cve.org/CVERecord?id=CVE-2026-49417

    Post summary

    The text discloses a use‑after‑free vulnerability in an audio buffer, noting that freed memory could be reused when the device is closed, but offers no PoC, exploit, or patch information.

    00000984
    57.7K followersView on X
  • moto kawasaki@motok2501
    Disclosure

    #FreeBSD-SA-26:27.sound sound(4)ドライバのmmap(2)サポートでカーネルメモリ読み出し・開放後使用。権限なしユーザによる権限昇格・カーネルクラッシュ・DoS。 CVE-2026-45258 CVE-2026-49417 https://www.freebsd.org/security/advisories/FreeBSD-SA-26:27.sound.asc

    Post summary

    The text announces a FreeBSD kernel privilege escalation and denial‑of‑service flaw, including CVE identifiers but lacks PoC, exploit code, or patch details.

    0000080
    224 followersView on X
CPE platform detail31 entries

31 of 31 entries

PartVendorProductVersionTarget SWTarget HW
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.3--
OSfreebsdfreebsd14.4--
OSfreebsdfreebsd14.4--
OSfreebsdfreebsd14.4--
OSfreebsdfreebsd14.4--
OSfreebsdfreebsd14.4--
OSfreebsdfreebsd14.4--
OSfreebsdfreebsd15.0--
OSfreebsdfreebsd15.0--
OSfreebsdfreebsd15.0--
OSfreebsdfreebsd15.0--
OSfreebsdfreebsd15.0--
OSfreebsdfreebsd15.0--
OSfreebsdfreebsd15.0--
OSfreebsdfreebsd15.0--
OSfreebsdfreebsd15.0--
OSfreebsdfreebsd15.0--

Explore more

Back to dashboardfreebsd CVEsfreebsd vulnerabilities