If you run FreeBSD, there’s a fresh kernel fix to grab. Trend Micro’s Zero Day Initiative published ZDI-26-784 (CVE-2026-58093, CVSS 8.8) on October 16. It’s a use-after-free in how the kernel handles filedesc objects.
An attacker needs to be able to run low-privilege code on the box first, but from there they can escalate and run code in the kernel. On a shared box or anything with untrusted users or services, that’s a big deal.
FreeBSD fixed it in advisory FreeBSD-SA-26:62. Patch with freebsd-update fetch install (or your usual build process) and reboot. This was reported back in August, so props to everyone for the coordinated release.
Happy Hacking!
