Freebsd vulnerabilities
165 CVEs and advisories name Freebsd as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-49425Kernel stack disclosure in 32-bit compatibility support
- CVE-2026-49424Kernel stack disclosure in Linux compatibility layer
- CVE-2026-49423Remote DOS via uninitialized memory access in KTLS receive
- CVE-2026-49426Incorrect audit records for ptrace(2) syscall requests
- CVE-2026-49428posixshm: system calls can incorrectly free memory of largepage objects
- CVE-2026-49427posixshm: largepage shared memory objects not explicitly wired
- CVE-2026-49422Use-after-free in TCP RACK stack option handler
- CVE-2026-49421unlinkat(2) ignores AT_RESOLVE_BENEATH flag
- CVE-2026-49420Buffer overflow in libalias RTSP handler
- CVE-2026-49431Incorrect user validation in ZFS_IOC_SET_PROP ioctl
- CVE-2026-49430Kernel heap overflow in ZFS_IOC_RECV_NEW ioctl
- CVE-2026-49429Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl
- CVE-2026-49415Local privilege escalation via execve(2) TOCTOU race
- CVE-2026-49419Jail reference count underflow
- CVE-2026-49418Use-after-free in device pager page list
- CVE-2026-49416Integer overflow in vt(4) CONS_HISTORY ioctl
- CVE-2026-49414ASLR bypass for setuid executables via procctl(2)
- CVE-2026-49413Flaw in Linuxulator execution of setugid binaries
- CVE-2026-49412Use-after-free bug in the IPV6_MSFILTER socket option handler
- CVE-2026-45259sigqueue(2) missing capability mode restriction
- CVE-2026-45258Multiple vulnerabilities in the sound(4) mmap path
- CVE-2026-49417Multiple vulnerabilities in the sound(4) mmap path
- CVE-2026-45257Arbitrary file overwrite via the KTLS receive path
- CVE-2026-45256Missing permission check in thr_kill2(2)
- CVE-2026-45254Incorrect libcap_net limitation list manipulation
- CVE-2026-45255Remote code execution via installer Wi-Fi access point scans
- CVE-2026-39461select(2) file descriptor set overflow causes stack overflow
- CVE-2026-45253Missing validation in ptrace(PT_SC_REMOTE)
- CVE-2026-45252Heap overflow in FUSE_LISTXATTR
- CVE-2026-45251Kernel use-after-free via file descriptor syscalls