CVE-2026-32848
MEDIUM
MEDIUM
Priority: 0.00
BB Relevance:
36/100
Published: 2026-05-18
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
X
AT:
None
VC:
None
VI:
None
VA:
High
Description
NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier on SMP systems. Attackers can exploit mutable per-operation state embedded in the csession struct to corrupt kernel heap memory.