CVE-2026-58090 — Use-after-free in unix SOCK_STREAM message handling
The SOCK_STREAM receive path in the unix socket implementation failed to fully detach control messages from the socket buffer before processing them. Some error paths would fre…
Published: 2026-08-26 · CVSS: 7.8 · CVSS 3.1
The SOCK_STREAM receive path in the unix socket implementation failed to fully detach control messages from the socket buffer before processing them. Some error paths would free those messages, leaving freed data mbufs in the receive socket buffer. An unprivileged local user can exploit this use-after-free to escalate privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7