CVE-2026-53996
A permanent, source-backed tracker page. Values are shown only when returned; explicit gaps and read failures remain different states.
What it is
ReportedNetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIO_FGRP_SETCONFIG ioctl without elevated permissions by exploiting the absence of an access check on /dev/hdaudioN device nodes.… Source description excerpt; complete tracked detail loads below.
Source reported · Source: CVE record · Source last published: · Source last updated: · Tracker data as of:
What is affected
ReportedThe NetBSD Foundation — NetBSD. Product-level identification only; no affected-version conclusion is available from this field.
Source reported · Source: CVE record · Source last published: · Source last updated: · Tracker data as of:
Urgency and basis
ReportedTrack · 114.2
Tracker computed · Tracker decision tier from the evidence detailed below · Source last updated: · Tracker data as of:
Exploitation evidence
Not reportedNot reported by tracked sources.
What to do
Not reportedNot reported by tracked sources.
Evidence detail
Loading the full tracker evidence record…