Vulnerability Description
sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().
CVSS Score
7.4
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Related Weaknesses (CWE)
References
- https://github.com/openbsd/src/commit/1957873d2063db11dab780eca75b5e629d1e838d
- https://openai.com/index/patch-the-planet/
FAQ
What is CVE-2026-57589?
CVE-2026-57589 is a vulnerability with a CVSS score of 7.4 (HIGH). sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().
How severe is CVE-2026-57589?
CVE-2026-57589 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-57589?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.