ByteOS Network

NVD Vulnerability Details :

CVE-2026-57589

Analyzed

Source-cve@mitre.org

Published At-25 Jun, 2026 | 01:16

Updated At-10 Jul, 2026 | 16:39

sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.4	HIGH	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
			N/A

Type: Secondary

Version: 3.1

Base score: 7.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: N/A

Version:

Base score:

Base severity: N/A

Vector:

CPE Matches

OpenBSD

>>openbsd>>Versions up to 7.9(inclusive)

cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Secondary	cve@mitre.org

CWE ID: CWE-416

Type: Secondary

Source: cve@mitre.org

References

Hyperlink	Source	Resource
https://github.com/openbsd/src/commit/1957873d2063db11dab780eca75b5e629d1e838d	cve@mitre.org	Patch
https://openai.com/index/patch-the-planet/	cve@mitre.org	Third Party Advisory

Hyperlink: https://github.com/openbsd/src/commit/1957873d2063db11dab780eca75b5e629d1e838d

Source: cve@mitre.org

Resource:

Patch

Hyperlink: https://openai.com/index/patch-the-planet/

Source: cve@mitre.org

Resource:

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History