Stack Corruption Vulnerability in libcasper for FreeBSD

CVE-2026-39461

What is CVE-2026-39461?

The libcasper library in FreeBSD can suffer from a stack corruption vulnerability due to improper handling of socket descriptors within the select system call. This occurs when the library does not check whether the socket descriptor exceeds the FD_SETSIZE limit of 1024. An attacker can exploit this by creating excessive file descriptors, leading to potential stack corruption. If the targeted application runs with elevated privileges, this flaw can be leveraged for local privilege escalation, posing significant risk to system integrity.

References