Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-57842— NetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlen

Quick assessment

Affected
The NetBSD Foundation NetBSD
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NetBSD 中存在一个由于 COMPAT_NETBSD32 兼容性层中 函数在成功路径上缺少 语句，从而导致释放后使用（use-after-free）和双重释放（double-free）的漏洞。在 64 位 NetBSD 系统上能够执行 32 位二进制的任何本地用户，都可以通过调用 并将 设置为介于 9 和 之间来触发该漏洞，导致内核访问已释放的 iovec 缓冲区，随后对同一内存分配进行第二次释放，从而引发内核恐慌（kernel panic）或内存损坏。

CVSS 7.0 · High

Affected Version Matrix 3

VendorProduct Version RangeStatus
The NetBSD Foundation NetBSD 8.0≤ 8.3 affected
9.0< 9.5 affected
10.0≤ 10.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-57842

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
NetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlen
Source: CVE Program / CVE List V5
Vulnerability Description
NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path. Any local user able to execute a 32-bit binary on a 64-bit NetBSD system can trigger a kernel panic or memory corruption by calling recvmsg() with msg_iovlen between 9 and IOV_MAX, causing the kernel to access a freed iovec buffer and subsequently free the same allocation a second time.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
双重释放
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
The NetBSD Foundation NetBSD 8.0 ~ 8.3 -

II. Public POCs for CVE-2026-57842

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-57842

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-57842 (2)

IV. Related Vulnerabilities

Same product: NetBSD
Same vendor: The NetBSD Foundation
Same weakness: CWE-415

V. Comments for CVE-2026-57842

No comments yet

Leave a comment