Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 32

kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.001 Published 2026-10-15 Fixed in p4 CWE-125
Priority LOW 32

When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used internally to track list traversal position) before marking them as in-flux and releasing the kqueue lock.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.001 Published 2026-10-15 Fixed in p4 CWE-362