{"id":181730,"date":"2026-05-25T20:48:13","date_gmt":"2026-05-25T18:48:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/7-novyh-uyazvimostej-v-freebsd"},"modified":"2026-05-25T20:48:13","modified_gmt":"2026-05-25T18:48:14","slug":"7-novyh-uyazvimostej-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","title":{"rendered":"7 nuove vulnerabilit\u00e0 in FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Il 20 maggio 2026, gli sviluppatori di FreeBSD hanno annunciato la correzione di sette nuove vulnerabilit\u00e0 nel sistema. Non tutte sono ugualmente pericolose, ma ci sono anche problematiche molto gravi.
\n<\/p>\n

<\/p>\n

CVE-2026-45251<\/a> \u2014 use-after-free in syscalls similar to select, if their waiting list contains process descriptors (in FreeBSD 15 \u2014 including new jail descriptors), and these descriptors were closed in another thread while the waiting syscall was still pending. Judging by questo commit<\/a>, sono coinvolti anche descrittori associati a netmap (driver per l'accesso diretto accelerato all'adattatore di rete), ma non ci sono informazioni ufficiali al riguardo. I descrittori di processo sono stati introdotti in FreeBSD 9, quindi la vulnerabilit\u00e0 esiste probabilmente da allora. Nella dichiarazione ufficiale viene indicato che la vulnerabilit\u00e0 consente di ottenere privilegi di superutente. Non ci sono modi per neutralizzarla senza patch\/aggiornamento.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45250<\/a> \u2014 incorrect buffer size calculation and subsequent writing past the buffer in the setcred syscall, despite the fact that setcred itself requires root privileges, the stack corruption occurs before the privileges are checked and is thus accessible to everyone. This syscall appeared in FreeBSD 14.3 (that is, earlier versions are not affected) and provides a way to set all user and group identifiers of the current process in one call, instead of combinations of setuid+setgid+setgroups and similar. The vulnerability allows malicious code to be executed in the context of the kernel. There is no way to neutralize it without a patch\/update.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45252<\/a> \u2014 the absence of a check for the null terminator before copying a string obtained from the fuse daemon into a new buffer. Nevertheless, there is a check for the maximum copy size, and more than 253 extra bytes from kernel memory cannot be read. Furthermore, it is possible to write up to 250 bytes into the 'unallocated kernel heap space'. By default, FreeBSD prohibits non-root users from mounting filesystems, meaning that in order to introduce a malicious fuse daemon to the kernel, one must be root. However, if sysctl vfs.usermount=1 \u2014 the system becomes vulnerable to regular users as well. It is also worth considering the danger of the fuse daemon in a jail, where it may also be root (but by default this is also prohibited).<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45253<\/a> \u2014 when using ptrace, it was possible to invoke a syscall with an incorrect number in a debugged process, which could lead to the execution in the kernel of code not intended for invocation as a syscall, with potentially dire consequences. If security.bsd.unprivileged_proc_debug=0 is set (which is good practice for servers in any case, and the system installer even suggests doing this optionally), then user and jailed processes will not be able to use ptrace, thus the vulnerability will remain accessible only to root.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45255<\/a> — iniezione di comandi shell con diritti root in bsdinstall\/bsdconfig attraverso i nomi di reti wireless dannose, che non venivano escapate, durante la visualizzazione della loro lista. Per evitare questa vulnerabilit\u00e0, \u00e8 sufficiente non visualizzare la lista delle reti wireless da bsdinstall\/bsdconfig.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-39461<\/a>, CVE-2026-45254<\/a> — vulnerabilit\u00e0 nella libreria libcasper (non nel kernel). La libreria \u00e8 destinata a fornire servizi configurabili in modo sicuro ai processi collocati in sandbox. Una delle vulnerabilit\u00e0 \u00e8 legata a un buffer overflow nello stack e al danneggiamento dello stack mediante l'organizzazione di questa libreria di descrittori di file con numeri elevati (era prevista per numeri fino a 1024  — il limite predefinito delle strutture per la system call select). La seconda vulnerabilit\u00e0 — la possibilit\u00e0 di rimuovere le liste di restrizioni sovrapposte (l'ideologia della libreria consiste nel fatto che le restrizioni imposte a un processo possono solo essere inasprite) cap_net.<\/p>\n

<\/noindex><\/p>\n

Le versioni corrette del sistema hanno i numeri: 14.3-RELEASE-p14, 14.4-RELEASE-p5 e 15.0-RELEASE-p9. \u00c8 importante notare che il rilascio di FreeBSD 13.5 \u00e8 stato recentemente dismesso dal supporto — 30 aprile 2026, e per questo (e per l'intera branch 13.x) non ci sono pi\u00f9 correzioni ufficiali. Tuttavia, se per qualche motivo non volete affrettarvi nel passaggio alla release 14.x, le patch per la versione 14.3 si adattano generalmente anche ai sorgenti di 13.5, e CVE-2026-45250 per la branch 13 non \u00e8 attuale in relazione all'assenza di setcred() in essa.<\/p>\n

<\/noindex><\/p>\n

Fonte: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435. CVE-2026-45251 — use-after-free \u0432 select-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0438\u0441\u043a\u043e\u043b\u043b\u0430\u0445, \u0435\u0441\u043b\u0438 \u0432 \u0438\u0445 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u0432 FreeBSD 15 — \u0435\u0449\u0451 \u043d\u043e\u0432\u044b\u0435 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b jail-\u043e\u0432), \u0438 \u044d\u0442\u0438 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043f\u043e\u0442\u043e\u043a\u0435 \u043f\u043e\u043a\u0430 \u043e\u0436\u0438\u0434\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u043a\u043e\u043b\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181730","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd477 nuove vulnerabilit\u00e0 in FreeBSD | ProHoster","description":"Il 20 maggio 2026, gli sviluppatori di FreeBSD hanno annunciato la correzione di sette nuove vulnerabilit\u00e0 nel sistema. Non tutte sono ugualmente pericolose, ma ci sono anche problematiche molto gravi.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 FreeBSD | ProHoster","og:description":"20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-25T18:48:14+00:00","article:modified_time":"2026-05-25T18:48:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/181730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=181730"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/181730\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=181730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=181730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=181730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}