CVE

CVE-2026-57589

sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().

Severity: HIGH
CVSS: 7.4
Published: Jun 25, 2026
Modified: Jul 10, 2026

NVD detail All CVEs

Linked Releases

Distribution	Release	Status	Evidence
OpenBSD	7.9 alpha boot-cd	unknown	source
OpenBSD	7.9 alpha install	unknown	source
OpenBSD	7.9 alpha miniroot	unknown	source
OpenBSD	7.9 amd64 boot-cd	unknown	source
OpenBSD	7.9 amd64 floppy	unknown	source
OpenBSD	7.9 amd64 install	unknown	source
OpenBSD	7.9 amd64 miniroot	unknown	source
OpenBSD	7.9 arm64 boot-cd	unknown	source
OpenBSD	7.9 arm64 install	unknown	source
OpenBSD	7.9 arm64 miniroot	unknown	source
OpenBSD	7.9 armv7 miniroot	unknown	source
OpenBSD	7.9 hppa boot-cd	unknown	source
OpenBSD	7.9 hppa install	unknown	source
OpenBSD	7.9 hppa lif	unknown	source
OpenBSD	7.9 i386 boot-cd	unknown	source
OpenBSD	7.9 i386 floppy	unknown	source
OpenBSD	7.9 i386 install	unknown	source
OpenBSD	7.9 i386 miniroot	unknown	source
OpenBSD	7.9 landisk miniroot	unknown	source
OpenBSD	7.9 loongson boot-cd	unknown	source
OpenBSD	7.9 loongson miniroot	unknown	source
OpenBSD	7.9 luna88k miniroot	unknown	source
OpenBSD	7.9 macppc boot-cd	unknown	source
OpenBSD	7.9 macppc install	unknown	source
OpenBSD	7.9 octeon install	unknown	source
OpenBSD	7.9 octeon miniroot	unknown	source
OpenBSD	7.9 powerpc64 install	unknown	source
OpenBSD	7.9 powerpc64 miniroot	unknown	source
OpenBSD	7.9 riscv64 install	unknown	source
OpenBSD	7.9 riscv64 miniroot	unknown	source
OpenBSD	7.9 sparc64 boot-cd	unknown	source
OpenBSD	7.9 sparc64 floppy	unknown	source
OpenBSD	7.9 sparc64 floppy-b	unknown	source
OpenBSD	7.9 sparc64 install	unknown	source
OpenBSD	7.9 sparc64 miniroot	unknown	source

CVE-2026-57589

Linked Releases

References