CVE-2026-0038
High · 8.4CVSS
8.4
EPSS
0.2%
Published
Mar 2, 2026
CISA due date
—
The record
In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|