DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
FreeBSD Project FreeBSD OS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-07-29
Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um seine Privilegien zu erhöhen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.
01
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-58088US | — | — | ||
The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the corresponding program headers, then iterated over the map a second time to populate… | ||||
| CVE-2026-58087US | — | — | ||
The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and r… | ||||
| CVE-2026-58086US | — | — | ||
As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged… | ||||
| CVE-2026-58085US | — | — | ||
After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether the MAC verification step succeeded. The driver thus silently accep… | ||||
| CVE-2026-58084US | — | — | ||
To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains the current time for the timer's clock. For a timer using CLOCK_TAI this can fail when no… | ||||
| CVE-2026-58083US | — | — | ||
While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was complete. The copy ro… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- FreeBSD Security Advisory FreeBSD-SA-26:50.kqueue vom 2026-07-29external
- FreeBSD Security Advisory FreeBSD-SA-26:51.ktimer vom 2026-07-29external
- FreeBSD Security Advisory FreeBSD-SA-26:52.if_wg vom 2026-07-29external
- FreeBSD Security Advisory FreeBSD-SA-26:53.ktrace vom 2026-07-29external
- FreeBSD Security Advisory FreeBSD-SA-26:54.sysvsem vom 2026-07-29external
- FreeBSD Security Advisory FreeBSD-SA-26:55.elf vom 2026-07-29external
- WID-SEC-W-2026-2590 - CSAF Versionself
- WID-SEC-2026-2590 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan