Stack Data Exposure in FreeBSD Linux Compatibility Layer

CVE-2026-49424

What is CVE-2026-49424?

A vulnerability in the FreeBSD Linux compatibility layer arises from the mismanagement of stack memory during the translation of the siginfo_t struct. This flaw does not zero out the stack memory, leading to the potential exposure of up to 104 bytes of uninitialized kernel stack data to unprivileged users. This data may inadvertently reveal sensitive information, heightening the risk of unauthorized data access.

References