8.1

CVE-2026-58086

ktrace(2) privilege incorrectly validated in jails

As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user.  Tracing configured by a jailed root user was therefore not flagged as privileged.

An unprivileged user in a jail that has permission to debug the target process can modify the jailed root user's ktrace(2) flags, or disable tracing outright.  A jailed root user therefore cannot reliably trace unprivileged processes.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version 15.0 Update -
Freebsd ≫ Freebsd Version 15.0 Update p1
Freebsd ≫ Freebsd Version 15.0 Update p10
Freebsd ≫ Freebsd Version 15.0 Update p11
Freebsd ≫ Freebsd Version 15.0 Update p2
Freebsd ≫ Freebsd Version 15.0 Update p3
Freebsd ≫ Freebsd Version 15.0 Update p4
Freebsd ≫ Freebsd Version 15.0 Update p5
Freebsd ≫ Freebsd Version 15.0 Update p6
Freebsd ≫ Freebsd Version 15.0 Update p7
Freebsd ≫ Freebsd Version 15.0 Update p8
Freebsd ≫ Freebsd Version 15.0 Update p9
Freebsd ≫ Freebsd Version 15.1 Update -
Freebsd ≫ Freebsd Version 15.1 Update p1
Freebsd ≫ Freebsd Version 15.1 Update rc2
Freebsd ≫ Freebsd Version 15.1 Update rc3-p1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.079
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 8.1 2.8 5.2
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE-273 Improper Check for Dropped Privileges

The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.

https://security.freebsd.org/advisories/FreeBSD-SA-26:53.ktrace.asc
Vendor Advisory