CVE-2026-58086

Published: Aug 19, 2026Modified: Aug 31, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed root user's ktrace(2) flags, or disable tracing outright. A jailed root user therefore cannot reliably trace unprivileged processes.

Affected (16)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 15.0
Freebsd Freebsd	Version 15.0 p10
Freebsd Freebsd	Version 15.0 p11
Freebsd Freebsd	Version 15.0 p1
Freebsd Freebsd	Version 15.0 p2
Freebsd Freebsd	Version 15.0 p3
Freebsd Freebsd	Version 15.0 p4
Freebsd Freebsd	Version 15.0 p5
Freebsd Freebsd	Version 15.0 p6
Freebsd Freebsd	Version 15.0 p7
Freebsd Freebsd	Version 15.0 p8
Freebsd Freebsd	Version 15.0 p9
Freebsd Freebsd	Version 15.1
Freebsd Freebsd	Version 15.1 p1
Freebsd Freebsd	Version 15.1 rc2
Freebsd Freebsd	Version 15.1 rc3-p1

Related CWEs

CWE-273

Improper Check for Dropped Privileges

The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.

References (1)

https://security.freebsd.org/advisories/FreeBSD-SA-26:53.ktrace.asc

Source: secteam@freebsd.org

Vendor Advisory

Timeline

No history available yet.