CVE-2026-58734: Race Condition
Published Sep 15, 2026
·Updated
In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Event History
Sep 15, 2026
CVE Published
via MITRE·06:34 PM
Data Sourced
via MITRE·06:34 PM
DescriptionWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue is described as enabling local escalation of privilege with no additional execution privileges needed. This indicates exploitation starts from local access rather than requiring elevated privileges first.
2
Is user interaction required for exploitation?
No. The provided information states that user interaction is not needed.
3
What implementation flaw causes the privilege-escalation risk?
The flaw is an out-of-bounds write in google_mba_recv_msg of google_mba_poll.c caused by a race condition.