A vulnerability in the execve system call that provides root access in FreeBSD
A vulnerability (CVE-2026-7270) has been discovered in FreeBSD, allowing an unprivileged user to execute code with kernel rights and gain root access to the system. The vulnerability affects all FreeBSD releases created since 2013. An exploit has been publicly released, verified to work on systems with FreeBSD versions 11.0 to 14.4. The vulnerability has been fixed in the updates FreeBSD 15.0-RELEASE-p7, 14.4-RELEASE-p3, 14.3-RELEASE-p12, and 13.5-RELEASE-p13. For older […]
