ASLR Bypass Vulnerability in FreeBSD ELF Image Activator

CVE-2026-49414

What is CVE-2026-49414?

The ELF image activator in FreeBSD has a vulnerability that allows an unprivileged local user to bypass Address Space Layout Randomization (ASLR) for setuid Position Independent Executable (PIE) binaries. By manipulating ASLR preference flags through the procctl(2) system call before executing a binary via execve(2), an attacker can render ASLR ineffective at the crucial moment when the binary's base address is determined. This flaw ultimately facilitates the exploitation of other memory corruption vulnerabilities present in the affected binaries, posing a significant security risk.

References