CVE-2026-32848— NetBSD cryptodev Race Condition Double-Free via cryptodev_op()
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-32848
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
NetBSD cryptodev Race Condition Double-Free via cryptodev_op()
Source: NVD (National Vulnerability Database)
Vulnerability Description
NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier on SMP systems. Attackers can exploit mutable per-operation state embedded in the csession struct to corrupt kernel heap memory.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
双重释放
Source: NVD (National Vulnerability Database)
Vulnerability Title
NetBSD 竞争条件问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NetBSD是NetBSD基金会的一套开源的类Unix操作系统。 NetBSD ec8451之前版本存在竞争条件问题漏洞，该漏洞源于opencrypto子系统中cryptodev_op函数存在竞争条件，可能导致双重释放。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-32848
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-32848
请登录查看更多情报信息。
Advisory · 1Blog · 1Patch · 1
- NetBSD Race Condition Double-Free via cryptodev_op() | Advisories | VulnCheckthird-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-32848
IV. Related Vulnerabilities
Same weakness: CWE-415
- CVE-2020-37239
libbabl 0.1.62 Broken Double Free Detection Memory Safety - CVE-2026-44348
PoDoFo: Double-free vulnerability in compute_hash_to_sign() - CVE-2026-34341
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Pr - CVE-2026-33838
Windows Message Queuing (MSMQ) Elevation of Privilege Vulner - CVE-2026-32170
Windows Rich Text Edit Elevation of Privilege Vulnerability
V. Comments for CVE-2026-32848
No comments yet