CVE-2026-58086

Summary

As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged.

An unprivileged user in a jail that has permission to debug the target process can modify the jailed root user's ktrace(2) flags, or disable tracing outright. A jailed root user therefore cannot reliably trace unprivileged processes.

Affected Software

VendorProductVersion RangeStatus
FreeBSDFreeBSD15.1-RELEASE < p2affected
FreeBSDFreeBSD15.0-RELEASE < p12affected

Weaknesses

  • CWE-273: CWE-273: Improper Check for Dropped Privileges

References