Verified

CVE-2026-101308: FreeBSD 15.1-RELEASE to before p5, 14.5-RELEASE to before p2, 14.4-RELEASE to before p11

Affected technology

FreeBSD · 15.1-RELEASE to before p5, 14.5-RELEASE to before p2, 14.4-RELEASE to before p11
FreeBSD

Component: sound

What an attacker can do

An unprivileged local user with access to a sound device can exploit this race to trigger a use-after-free in the kernel, potentially escalating privileges.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-367
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-101308.html