CVE-2026-58086
ktrace(2) privilege incorrectly validated in jails
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed root user's ktrace(2) flags, or disable tracing outright. A jailed root user therefore cannot reliably trace unprivileged processes.
| CWE | CWE-273 |
| Vendor | freebsd |
| Product | freebsd |
| Published | Aug 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for freebsd freebsd
Be the first to know when new unknown vulnerabilities affecting freebsd freebsd are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
FreeBSD / FreeBSD
15.1-RELEASE < p2 15.0-RELEASE < p12
References
Credits
Alexander Leidinger