{"id":182553,"date":"2026-07-08T22:53:54","date_gmt":"2026-07-08T20:53:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/novye-uyazvimosti-freebsd"},"modified":"2026-07-08T22:53:54","modified_gmt":"2026-07-08T20:53:54","slug":"novye-uyazvimosti-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/novye-uyazvimosti-freebsd","title":{"rendered":"Nye s\u00e5rbarheder i FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex>          <a rel=\"nofollow\" id=\"memories_button\" href=\"#\" title=\"Spor\"><i class=\"icon-bell\"><\/i><\/a><br \/>2                            <\/p>\n<p>Den 30. juni 2026 blev der offentliggjort meddelelser om rettelser til 13 nye s\u00e5rbarheder i FreeBSD-operativsystemet.<\/p>\n<ul>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:37.vm.asc\">CVE-2026-49418<\/a>. En bruger med adgang til en enhed med memory-mapped interface kan for\u00e5rsage double-free\/use-after-free i kernen. Dette kan sandsynligvis f\u00f8re til oph\u00f8jelse af privilegier. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:38.jail.asc\">CVE-2026-49419<\/a>. (kun FreeBSD 15+) Dobbelt reduktion af refcount for den aktuelle jail ved behandling af en fejl i forbindelse med en anden jail via jail descriptor (introduceret i FreeBSD 15), hvilket f\u00f8rer til uventet frigivelse af jail's kontrolstruktur og efterf\u00f8lgende use-after-free, hvor som helst den bruges. Teoretisk kan dette f\u00f8re til oph\u00f8jelse af privilegier. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:39.execve.asc\">CVE-2026-49415<\/a>. Ved udf\u00f8relse af en setuid-program indstilles adgangsrettighederne til dens hukommelse lidt senere end hukommelsen initialiseres, hvilket giver mulighed for midlertidig adgang til og redigering af denne hukommelse uden de n\u00f8dvendige privilegier via procfs eller linprocfs. I de fleste systemer er procfs, og is\u00e6r libprocfs, ikke monteret, s\u00e5 problemet ber\u00f8rer sandsynligvis kun f\u00e5. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:40.zfs.asc\">CVE-2026-49429, CVE-2026-49430, CVE-2026-49431<\/a>. (kun til systemer med ZFS) De f\u00f8rste to fejl handler om tildeling af hukommelse i forkert st\u00f8rrelse: en buffer tildeles i den st\u00f8rrelse, der er angivet som et 32-bit tal, og derefter skrives der data af den reelle st\u00f8rrelse ind i den, hvilket f\u00f8rer til overfyldning, hvis den reelle st\u00f8rrelse af bufferen var st\u00f8rre end 4 GB. Begge fejl kan kun udl\u00f8ses af root eller en bruger med s\u00e6rskilt tildelte privilegier til s\u00e5rbare operationer. Den tredje fejl er tilg\u00e6ngelig for udnyttelse af alle, og den giver enhver mulighed for at p\u00e5h\u00e6fte et flag &#171;$hasrecvd&#187; til datas\u00e6ttet ved hj\u00e6lp af ZFS_IOC_SET_PROP (hvor farligt det er, fremg\u00e5r ikke af meddelelsen). <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:41.libalias.asc\">CVE-2026-49420<\/a>. Manglende korrekt kontrol af pakkest\u00f8rrelse, f\u00f8r den skrives til en fast st\u00f8rrelse buffer p\u00e5 stakken i libalias-modulet til RTSP support, f\u00f8rer til muligheden for fjernoverfyldning af enten stakken eller kernen (for ipfw nat) eller processen natd (som typisk k\u00f8rer som root) uden godkendelse. Det kan potentielt f\u00f8re til RCE. S\u00e5rbarheden kan udl\u00f8ses af en ondsindet v\u00e6rt inden for det lokale netv\u00e6rk bag NAT implementeret via libalias, der sender skadelige RTSP-pakker. S\u00e5rbarheden p\u00e5virker alts\u00e5 ikke v\u00e6rter, hvor NAT ikke k\u00f8rer i nogen form. Desuden: natd vil ikke v\u00e6re s\u00e5rbar, hvis linjen libalias_smedia.so fjernes fra \/etc\/libalias.conf og natd genstartes, og ipfw nat vil ikke v\u00e6re s\u00e5rbar uden at indl\u00e6se modulet alias_smedia.ko (det n\u00e6vnes ikke, om det kan indl\u00e6ses automatisk). Desuden ser den s\u00e5rbare behandler kun TCP\/UDP pakker, der g\u00e5r ud, hvoraf en af portene er 554 eller 7070 \u2014 hvis s\u00e5danne pakker firewallede, inden de n\u00e5r NAT, forsvinder s\u00e5rbarheden ogs\u00e5. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:42.unlinkat.asc\">CVE-2026-49421<\/a>. unlinkat() og funlinkat() tog ikke h\u00f8jde for flaget AT_RESOLVE_BENEATH, hvilket skulle forhindre at man ved gennemgang af stien bev\u00e6gede sig ud over den angivne mappe i argumentet dirfd. Dermed blev det muligt at slette filer uden for mappen, n\u00e5r den kaldende kode \u00f8nskede at indf\u00f8re denne begr\u00e6nsning. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:43.tcp.asc\">CVE-2026-49422<\/a>. Race-forhold i tcp_rack.ko-modulet (som standard ikke indl\u00e6st). Hver tcp-socket kan individuelt v\u00e6lge den tcp-stak, som den vil arbejde gennem, inklusive muligheden for at skifte dem on-the-fly. Hvis man g\u00f8r f\u00f8lgende: 1) p\u00e5 en socket med tcp_rack kalder man en rack-specifik setsockopt(), 2) i en anden tr\u00e5d form\u00e5r man hurtigt at skifte tcp-stakken fra rack til en anden og hurtigt skifte tilbage til rack p\u00e5 det rigtige tidspunkt, s\u00e5 vil rack-h\u00e5ndtereren for setsockopt() arbejde med den gamle (f\u00f8r skiftet) adresse til socketens tilstandsstruktur, hvilket f\u00f8rer til hukommelsesskader og potentielt forh\u00f8jet privilegium. S\u00e5rbare er kun systemer, hvor tcp_rack.ko eksplicit er indl\u00e6st, dette er ikke standard.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:44.posixshm.asc\">CVE-2026-49427, CVE-2026-49428<\/a>. POSIX largepages (shm_create_largepage) blev ikke tilstr\u00e6kkeligt korrekt markeret som brugt ved allokering, hvilket kunne f\u00f8re til fejlagtig frigivelse under forskellige omst\u00e6ndigheder (n\u00e6vnt er kald til sendfile med flaget SF_NOCACHE, open med flaget O_TRUNC og fspacectl) og efterf\u00f8lgende use-after-free med almindelige konsekvenser.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:45.audit.asc\">CVE-2026-49426<\/a>. Ukorrekte audit(4) logs om fjerna syscalls via ptrace(PT_SC_REMOTE). De kan forvirre systemer der analyserer mist\u00e6nkelige situationer, hvis s\u00e5danne anvendes.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:46.ktls.asc\">CVE-2026-49423<\/a>. Mulig kernel-panic ved modtagelse af data via kTLS med TLS 1.2 CBC-optegnelser. For at undg\u00e5 problemet kan man s\u00e6tte kern.ipc.tls.enable=0 eller kern.ipc.tls.cbc_enable=0.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:47.linux.asc\">CVE-2026-49424<\/a>. Data-l\u00e6kage (104 byte) fra kerne-stakken ved kald til linux-compat waitid(), som glemmer at nulstille den ubrugte del af linux-strukturen siginfo_t, n\u00e5r den overf\u00f8rer data fra freebsd'en. I almindelige GENERIC-kjerner er linux-emulatoren som standard deaktivert og aktiveres kun ved manuel indl\u00e6sning af modulet.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:48.compat32.asc\">CVE-2026-49425<\/a>. Lignende som ovenfor, glemmer 32-bit kevent at nulstille den 32-bit struktur f\u00f8r overf\u00f8rsel af data fra den native 64-bit, hvilket f\u00f8rer til data-l\u00e6kage fra stakken. Som standard er 32-bit kompatibilitet i kernen aktiveret (ikke modul).<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:49.iconv.asc\">CVE-2026-58081, CVE-2026-58082<\/a>. S\u00e5rbarheder i iconv. Den f\u00f8rste: mange af dens moduler kontrollerer ikke st\u00f8rrelsen p\u00e5 den output-buffer der leveres af kaldende kode, f\u00f8r der skrives resultatet (n\u00e6vnt HZ, UTF-7, VIQR, ZW). Den anden: modulet ISO-2022 bruger en 6-byte buffer i stakken til interne operationer, men der kan skrives op til 10 byte, hvilket beskadiger stakken. I sidste ende kan k\u00f8rsel af iconv for konvertering til eller fra en af de n\u00e6vnte kodninger med ikke-validerede input v\u00e6re udsat for buffer overflow. <\/li>\n<\/ul>\n<p>Kilde: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18335229\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421 FreeBSD. CVE-2026-49418. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 memory-mapped \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043c\u043e\u0436\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c double-free\/use-after-free \u0432 \u044f\u0434\u0440\u0435. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. CVE-2026-49419. (\u0442\u043e\u043b\u044c\u043a\u043e FreeBSD 15+) \u0414\u0432\u043e\u0439\u043d\u043e\u0435 \u0443\u043c\u0435\u043d\u044c\u0448\u0435\u043d\u0438\u0435 refcount \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e jail-\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443 jail \u043f\u043e jail [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182553","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Emin Berklin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/news\/novye-uyazvimosti-freebsd\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 FreeBSD | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/news\/novye-uyazvimosti-freebsd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-08T20:53:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-08T20:53:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nye s\u00e5rbarheder i FreeBSD | ProHoster","description":"2 30. juni 2026 blev meddelelser udsendt om rettelse af 13 nye s\u00e5rbarheder i OS.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/novye-uyazvimosti-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 FreeBSD | ProHoster","og:description":"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/novye-uyazvimosti-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-08T20:53:54+00:00","article:modified_time":"2026-07-08T20:53:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182553","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:06","updated":"2026-08-05 12:22:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/182553","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=182553"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/182553\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=182553"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=182553"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=182553"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}