CVE-2026-5398 - Vulnerability Analysis

Overview

The implementation of TIOCNOTTY contains a use-after-free vulnerability caused by failure to clear a back-pointer from the controlling terminal structure to the calling process' session, letting a malicious process escalate privileges by exploiting a dangling pointer.

Severity & Score

Impact

A malicious process can gain root privileges by exploiting a dangling pointer after process exit.

Mitigation

Update to the latest version with the fix for TIOCNOTTY use-after-free vulnerability.

References

• https://security.freebsd.org/advisories/FreeBSD-SA-26:10.tty.asc

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner