-

CVE-2026-58084

Kernel stack disclosure via timer_settime(2)

To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains the current time for the timer's clock.  For a timer using CLOCK_TAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to userspace.

An unprivileged local user can obtain uninitialized kernel stack memory by creating a POSIX timer with CLOCK_TAI and calling timer_settime(2), potentially disclosing sensitive kernel data.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerFreeBSD
≫
Produkt FreeBSD
Default Statusunknown
Version 15.1-RELEASE
Version < p2
Status affected
Version 15.0-RELEASE
Version < p12
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.081
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

https://security.freebsd.org/advisories/FreeBSD-SA-26:51.ktimer.asc