8.4

CVE-2026-45253

Missing validation in ptrace(PT_SC_REMOTE)

ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls.  As a result, a user with the ability to debug a process may trigger arbitrary code execution in the kernel, even if the target process has no special privileges.

The missing validation allows an unprivileged local user to escalate privileges, potentially gaining full control of the affected system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version 14.3 Update -
Freebsd ≫ Freebsd Version 14.3 Update p1
Freebsd ≫ Freebsd Version 14.3 Update p10
Freebsd ≫ Freebsd Version 14.3 Update p11
Freebsd ≫ Freebsd Version 14.3 Update p12
Freebsd ≫ Freebsd Version 14.3 Update p13
Freebsd ≫ Freebsd Version 14.3 Update p2
Freebsd ≫ Freebsd Version 14.3 Update p3
Freebsd ≫ Freebsd Version 14.3 Update p4
Freebsd ≫ Freebsd Version 14.3 Update p5
Freebsd ≫ Freebsd Version 14.3 Update p6
Freebsd ≫ Freebsd Version 14.3 Update p7
Freebsd ≫ Freebsd Version 14.3 Update p8
Freebsd ≫ Freebsd Version 14.3 Update p9
Freebsd ≫ Freebsd Version 14.4 Update -
Freebsd ≫ Freebsd Version 14.4 Update p1
Freebsd ≫ Freebsd Version 14.4 Update p2
Freebsd ≫ Freebsd Version 14.4 Update p3
Freebsd ≫ Freebsd Version 14.4 Update p4
Freebsd ≫ Freebsd Version 14.4 Update rc1
Freebsd ≫ Freebsd Version 15.0 Update -
Freebsd ≫ Freebsd Version 15.0 Update p1
Freebsd ≫ Freebsd Version 15.0 Update p2
Freebsd ≫ Freebsd Version 15.0 Update p3
Freebsd ≫ Freebsd Version 15.0 Update p4
Freebsd ≫ Freebsd Version 15.0 Update p5
Freebsd ≫ Freebsd Version 15.0 Update p6
Freebsd ≫ Freebsd Version 15.0 Update p7
Freebsd ≫ Freebsd Version 15.0 Update p8
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.094
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://security.freebsd.org/advisories/FreeBSD-SA-26:21.ptrace.asc
Vendor Advisory