{"uuid": "bd20c7ff-ebe4-4fca-bc20-9b19c3cda8f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28986", "type": "seen", "source": "https://notnow.dev/objects/38d54cfe-6014-45b5-881f-055acd601dbd", "content": "Still diffing macOS 15.7.5 vs 15.7.7:\nOn 15.7.7, msgctl(IPC_SET), after getting the message queue and computing ipcperm, no longer drops its lock during the copyin:\nhttps://github.com/apple-oss-distributions/xnu/blob/f6217f891ac0bb64f3d375211650a4c1ff8ca1ea/bsd/kern/sysv_msg.c#L492\nSo maybe this is the race condition of CVE-2026-28986?", "creation_timestamp": "2026-05-15T02:56:35.244821Z"}