PULSE
ES
FEED
ransomnightspire reclama a REFSA S.A. · AR · Otherransomsilentransomgroup reclama a S... G...ransomqilin reclama a Isapre Consalud · CL · Healthcareransomorova reclama a Harry's International · SG · Retail & E-Commerceransomeverstake reclama a da*****t.com · Technologyransomeverstake reclama a ra*****g.comransomredact reclama a Holland & Knight · US · Professional Servicesransomqilin reclama a Astino Berhad · MY · Manufacturingransomakira reclama a Princeton Management · Financial Servicesransomakira reclama a Usnextransomakira reclama a Howells Motor Freight · US · Transportationransomsafepay reclama a deom.be · BEransomhyflock reclama a Ateşsan Ambalaj · TR · Manufacturingransompear reclama a Neiman & Company, Inc. · US · Financial Servicesransomnightspire reclama a REFSA S.A. · AR · Otherransomsilentransomgroup reclama a S... G...ransomqilin reclama a Isapre Consalud · CL · Healthcareransomorova reclama a Harry's International · SG · Retail & E-Commerceransomeverstake reclama a da*****t.com · Technologyransomeverstake reclama a ra*****g.comransomredact reclama a Holland & Knight · US · Professional Servicesransomqilin reclama a Astino Berhad · MY · Manufacturingransomakira reclama a Princeton Management · Financial Servicesransomakira reclama a Usnextransomakira reclama a Howells Motor Freight · US · Transportationransomsafepay reclama a deom.be · BEransomhyflock reclama a Ateşsan Ambalaj · TR · Manufacturingransompear reclama a Neiman & Company, Inc. · US · Financial Services
← All CVEs
CVE WatchNov 2, 2026

CVE-2026-58827

In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privi

CVSS

8.4

High

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Nov 2, 2026 · Last modified: Nov 2, 2026 · CWE-416

EPSS · 30d

Not enough EPSS history yet.

Technical description

In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-590448.4 HIG
—
———In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6hCVE-2026-589848.4 HIG
—
———In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6hCVE-2026-589428.4 HIG
—
———In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6hCVE-2026-588298.4 HIG
—
———In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6hCVE-2026-588288.4 HIG
—
———In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6hCVE-2026-588268.4 HIG
—
———In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6h