Denial of Service Vulnerability in FreeBSD TLS 1.3 Implementation

CVE-2026-101302

What is CVE-2026-101302?

An issue in the FreeBSD implementation of TLS 1.3 was identified where an off-by-one error could be exploited by a remote peer. This bug allows a specially crafted record to cause an underflow, leading to an unconditional NULL pointer dereference that results in a kernel panic. The exploitation of this vulnerability can cause a Denial of Service (DoS), impacting the availability of services relying on TLS 1.3.

References