CVE-2026-58086

Опубликовано: 19 авг. 2026

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged.

An unprivileged user in a jail that has permission to debug the target process can modify the jailed root user's ktrace(2) flags, or disable tracing outright. A jailed root user therefore cannot reliably trace unprivileged processes.

Ссылки

https://security.freebsd.org/advisories/FreeBSD-SA-26:53.ktrace.asc
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:15.0:-:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p10:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p11:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p6:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p7:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p8:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.0:p9:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.1:-:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.1:p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.1:rc2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:15.1:rc3-p1:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00259

Низкий

8.1 High

CVSS3

Дефекты

CWE-273

Связанные уязвимости

GHSA-5q67-rff6-c784