CVE 5.9 MEDIUM

Missing validation in ptrace(PT_SC_REMOTE)_CVE-2026-45253

5.9 / 10
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. As a result, a user with the ability to debug a process may trigger arbitrary code execution in the kernel, even if the target process has no special privileges.

The missing validation allows an unprivileged local user to escalate privileges, potentially gaining full control of the affected system.

Basic Information

ID CVE-2026-45253
Source freebsd
Published May 21, 2026 at 09:17
Modified May 21, 2026 at 12:27

Affected Product

Vendor FreeBSD
Product FreeBSD
Version 15.0-RELEASE
Affected Versions FreeBSD FreeBSD 15.0-RELEASE
FreeBSD FreeBSD 14.4-RELEASE
FreeBSD FreeBSD 14.3-RELEASE

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.