tag
Freebsd
Critical
FreeBSD setcred(2) Kernel Stack Buffer Overflow — Local Privilege Escalation (CVE-2026-45250)
CVE-2026-45250·
FreeBSD kernel — setcred(2) system call (sys/kern/kern_prot.c)
unpatched
High
FreeBSD OSS /dev/dsp Stale Kernel-Stack Buffer Local Privilege Escalation (CVE-2026-49417)
CVE-2026-49417·
FreeBSD kernel — OSS audio driver (/dev/dsp) buffer allocation / thread-stack recycling
unpatched
High
FreeBSD Linuxulator AT_SECURE=0 Local Privilege Escalation via LD_PRELOAD (CVE-2026-49413)
CVE-2026-49413·
FreeBSD Linux compatibility layer ("Linuxulator", linux/linux64 kernel module) executing Linux setuid-root binaries under /compat/linux/
unpatched
Critical
FreeBSD exec_args_adjust_args() Out-of-Bounds memmove — Local Privilege Escalation via sshd Race (CVE-2026-7270)
CVE-2026-7270·
FreeBSD kernel — sys/kern/kern_exec.c exec_args_adjust_args()
unpatched
Critical
FreeBSD /dev/dsp (OSS) Negative-Offset mmap Kernel Memory Corruption LPE (CVE-2026-45258)
CVE-2026-45258·
FreeBSD kernel (OSS//dev/dsp sound driver mmap handling)
unpatched