Buffer Overflow Vulnerability in FreeBSD's Kernel Privilege Management
CVE-2026-45250
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-45250?
A vulnerability exists in FreeBSD's setcred(2) system call, where an unprivileged local user can exploit a stack buffer overflow due to improper length validation of a user-supplied supplementary groups list. This oversight allows for an arbitrary code execution in the kernel context, potentially granting elevated privileges to unauthorized users. Proper input validation measures are critical to mitigating such risks and protecting system integrity.
Affected Version(s)
FreeBSD 15.0-RELEASE
FreeBSD 14.4-RELEASE
FreeBSD 14.3-RELEASE
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.