FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

FreeBSD -- Missing validation in ptrace(PT_SC_REMOTE)

Affected packages
15.0 <= FreeBSD-kernel < 15.0_9
14.4 <= FreeBSD-kernel < 14.4_5
14.3 <= FreeBSD-kernel < 14.3_14

Details

VuXML ID 6c96da5e-54b6-11f1-8d7a-bc241121aa0a
Discovery 2026-05-20
Entry 2026-05-21

Problem Description:

ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. As a result, a user with the ability to debug a process may trigger arbitrary code execution in the kernel, even if the target process has no special privileges.

Impact:

The missing validation allows an unprivileged local user to escalate privileges, potentially gaining full control of the affected system.

References

CVE Name CVE-2026-45253
FreeBSD Advisory SA-26:21.ptrace

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.