CVE-2026-49415
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Vulnerability in FreeBSD during execve(2) of SUID binaries. The new virtual address space is installed before credentials are updated, allowing another process of the same user to access memory via procfs or linprocfs.
Risk Assessment
An unprivileged local user can exploit this race to modify the address space of a SUID binary before privilege elevation, potentially gaining full control of the system.
Recommendation
Apply the FreeBSD patch. Monitor procfs/linprocfs usage and consider disabling them if not required.
Original NVD description (English source)
During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user can access the target process's memory via procfs or linprocfs, because the kernel's debugging permission check still saw the original credentials. An unprivileged local user can exploit this race to modify the address space of a SUID binary before its credentials are elevated, potentially gaining full control of the affected system.