CVE-2026-49424

Kernel stack disclosure in Linux compatibility layer

State: Published
Severity: 5.5 Medium
Published: Aug 19, 2026
Updated: Aug 26, 2026
Reserved: May 29, 2026

Description

The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t. It did not first zero the stack struct.

An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	CISA-ADP

Weaknesses

CWE-908 Use of Uninitialized Resource

Affected Products

Product	Versions
FreeBSDFreeBSD	15.0-RELEASE to before p11Affected 14.4-RELEASE to before p7Affected 14.3-RELEASE to before p16Affected

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:47.linux.ascvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.