Loading story…
OpenBSD disclosed a local privilege-escalation vulnerability, tracked as CVE-2026-57589, in its System V semaphore implementation. The bug stems from an integer overflow in the sys_semget() handler that can lead to kernel memory corruption and allow a local user to escalate privileges to root under certain conditions.
A fix was committed to OpenBSD-current, while patches for stable branches were still pending in the reporting cited. The flaw was reportedly identified during the Patch the Planet event focused on AI-assisted vulnerability research, and the same reporting also referenced separate OpenBSD findings affecting IPsec/IPComp, NFS, and the pinsyscall and kbind mechanisms.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Also on June 23, a fix for CVE-2026-57589 was committed to the OpenBSD-current branch. At the time described by the sources, patches for stable branches were still pending and had not yet been backported.
On June 23, a vulnerability later tracked as CVE-2026-57589 was identified and presented during the Patch the Planet event focused on AI-assisted vulnerability research. The flaw affects OpenBSD's System V semaphore implementation and stems from an integer overflow in the sys_semget() handler that can lead to kernel memory corruption and possible local root privilege escalation.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Researchers disclosed two separate Linux kernel privilege-escalation flaws that can give local attackers **root** access across a wide range of systems, including servers, desktops, and Android devices. One bug, **`CVE-2026-46242`** or **Bad Epoll**, is a use-after-free race in the kernel's `epoll` subsystem that was reportedly exploited through Google's kernelCTF program and shown to be broadly reachable because `epoll` is a core component that cannot be disabled. The flaw was introduced by a 2023 kernel change, and reporting said an initial patch attempt was insufficient before a correct fix was merged weeks later, leaving defenders dependent on upstream fixes and vendor backports. A second flaw, **`CVE-2026-43456`**, affects the kernel's `net/bonding` subsystem and stems from a type-confusion condition dating back to 2007. Researchers said the bug can be exploited with high reliability for local root by abusing incompatible `header_ops` handling in bonded network devices, enabling controlled memory corruption and eventual code execution. The issue reportedly affects Linux versions **2.6.24 through 6.12.77** and requires **`CAP_NET_ADMIN`** privileges; mitigations include applying the March 2026 patch, or temporarily disabling unprivileged user namespaces or the bonding module where feasible.
Jul 11, 2026
dCERT published **Advisory 2026-1162** for **OpenBSD**, warning that a vulnerability could allow a **denial-of-service** condition. Public details in the notice were limited, but the issue indicates that affected OpenBSD systems may be susceptible to service disruption if the flaw is triggered. dCERT also issued **Advisory 2026-1202** covering the **FreeBSD Project FreeBSD OS**, reporting **multiple vulnerabilities** in the operating system. While the advisory summary did not include technical specifics, the paired disclosures highlight newly published security issues affecting two major BSD platforms and signal that administrators should review vendor guidance, assess exposure, and prioritize relevant patches or mitigations.
Jun 29, 2026
FreeBSD released security updates for **22 vulnerabilities** across the operating system, including multiple flaws that could lead to **remote code execution**, **local privilege escalation to root**, **denial of service**, **memory corruption**, and **information disclosure**. The most severe issue, **`CVE-2026-49420`**, affects `libalias`, where improper handling of **RTSP** traffic during NAT processing can allow **remote code execution as root** on systems using **`ipfw` NAT** or **`natd`**. The fixes were shipped in **FreeBSD 15.1-RELEASE-p1**, **15.0-RELEASE-p11**, **14.4-RELEASE-p7**, and **14.3-RELEASE-p16**. Additional patched components include `execve`, **Jail**, **OpenZFS**, **Linuxulator**, **KTLS**, `sound`, `vt`, `ptrace`, IPv6 multicast filtering, `tcp_rack`, `compat32`, `iconv`, and pathname resolution protections such as **`AT_RESOLVE_BENEATH`**, with the advisory noting that **13 of the issues** could enable privilege escalation to root.
Jul 7, 2026