Out-of-Bounds Read Vulnerability in HDA Audio Device Model by FreeBSD
CVE-2026-101310

Currently unrated

Key Information:

Vendor

FreeBSD

Status
FreeBSD
Vendor
CVE Published:
15 October 2026

What is CVE-2026-101310?

The HDA audio device model in FreeBSD is susceptible to an out-of-bounds read vulnerability due to improper handling of zero-length Buffer Descriptor List (BDL) entries when initiating a stream. An attacker with access to a guest virtual machine could exploit this issue to trigger a crash of the bhyve process or potentially execute arbitrary code within the host userspace context that manages the virtual machine, all while adhering to bhyve's Capsicum sandbox restrictions.

Affected Version(s)

FreeBSD 15.1-RELEASE

FreeBSD 14.5-RELEASE

FreeBSD 14.4-RELEASE

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:72....
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Brian Delgado from Intel using Anthropic Opus 4.8
Joshua Rogers of AISLE Research Team
Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li, and Ke Xu from Tsinghua University using GLM-5.1 from Z.ai
.