{"id":181730,"date":"2026-05-25T20:48:13","date_gmt":"2026-05-25T18:48:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/7-novyh-uyazvimostej-v-freebsd"},"modified":"2026-05-25T20:48:13","modified_gmt":"2026-05-25T18:48:14","slug":"7-novyh-uyazvimostej-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/no\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","title":{"rendered":"7 nye s\u00e5rbarheter i FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

20. mai 2026 kunngjorde utviklerne av FreeBSD at de hadde rettet syv nye s\u00e5rbarheter i systemet. Ikke alle er like farlige, men noen er sv\u00e6rt ubehagelige.
\n<\/p>\n

<\/p>\n

CVE-2026-45251<\/a> \u2014 use-after-free i select-liknande syscalls, om deras v\u00e4ntelistor har processhandtag (i FreeBSD 15 \u2014 ocks\u00e5 nya jail-handtag), och dessa handtag st\u00e4ngdes i en annan tr\u00e5d medan den v\u00e4ntande syscall fortfarande var i avvaktan. F\u00f6rmodligen enligt dette commitet<\/a>, er ogs\u00e5 beskrivelser knyttet til netmap (driver for akselerert direkte tilgang til nettverksadapteren) ber\u00f8rt, men det finnes ingen offisiell informasjon om dette. Prosessbeskrivelser ble introdusert i FreeBSD 9, s\u00e5 s\u00e5rbarheten har sannsynligvis eksistert siden den gang. I den offisielle uttalelsen er det p\u00e5pekt at s\u00e5rbarheten gir mulighet for \u00e5 f\u00e5 superbrukertilgang. Det finnes ingen muligheter for \u00e5 n\u00f8ytralisere den uten patch\/oppdatering.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45250<\/a> \u2014 felaktig ber\u00e4kning av buffertens storlek och efterf\u00f6ljande skrivning f\u00f6rbi bufferten i stacken i systemanropet setcred, vilket, trots att setcred sj\u00e4lv kr\u00e4ver root-beh\u00f6righeter, g\u00f6r att stacken skadas innan beh\u00f6righeterna kontrolleras och d\u00e4rmed \u00e4r tillg\u00e4nglig f\u00f6r alla. Detta systemanrop introducerades i FreeBSD 14.3 (det vill s\u00e4ga tidigare versioner p\u00e5verkas inte) och erbjuder ett s\u00e4tt att st\u00e4lla in alla anv\u00e4ndar- och gruppidentifierare f\u00f6r den aktuella processen i ett anrop, ist\u00e4llet f\u00f6r kombinationer av setuid+setgid+setgroups och liknande. S\u00e5rbarheten m\u00f6jligg\u00f6r k\u00f6rning av skadlig kod i k\u00e4rnans kontext. M\u00f6jligheten att neutralisera den utan patch\/uppdatering finns inte.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45252<\/a> \u2014 avsaknaden av kontroll f\u00f6r att se om en avslutande noll finns innan kopiering av en str\u00e4ng fr\u00e5n fuse-demonen till en ny buffert. Det finns dock en kontroll f\u00f6r maximal kopieringsstorlek d\u00e4r och mer \u00e4n 253 extra byte fr\u00e5n k\u00e4rnminnet kan inte l\u00e4sas. Det g\u00e5r ocks\u00e5 att skriva upp till 250 byte i \u00abunallocated kernel heap space\u00bb. Som standard \u00e4r det f\u00f6rbjudet i FreeBSD f\u00f6r icke-root anv\u00e4ndare att montera filsystem, vilket inneb\u00e4r att f\u00f6r att stoppa in en ondskefull fuse-demon i k\u00e4rnan m\u00e5ste man vara root. Men om sysctl vfs.usermount=1 \u2014 blir systemet s\u00e5rbart \u00e4ven f\u00f6r vanliga anv\u00e4ndare. Man b\u00f6r ocks\u00e5 beakta riskerna med fuse-demonen i jail, d\u00e4r den kan vara root (men som standard \u00e4r detta ocks\u00e5 f\u00f6rbjudet).<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45253<\/a> \u2014 vid anv\u00e4ndning av ptrace fanns det m\u00f6jlighet att k\u00f6ra ett systemanrop med ett felaktigt nummer i det avlusade processen, vilket ledde till att kod som inte var avsedd f\u00f6r k\u00f6rning som systemanrop exekverades i k\u00e4rnan med potentiellt d\u00e5liga konsekvenser. Om security.bsd.unprivileged_proc_debug=0 \u00e4r inst\u00e4llt (vilket \u00e4r en bra praxis f\u00f6r servrar oavsett, och installationsprogrammet erbjuder till och med att g\u00f6ra detta som ett val), d\u00e5 kommer anv\u00e4ndar- och jailed-processer inte kunna anv\u00e4nda ptrace och d\u00e4rmed kommer s\u00e5rbarheten f\u00f6rbli endast tillg\u00e4nglig f\u00f6r root.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45255<\/a> — shell-kommando-injeksjon med root-rettigheter i bsdinstall\/bsdconfig via navn p\u00e5 ondsinnede tr\u00e5dl\u00f8se nettverk som ikke ble unng\u00e5tt, i \u00f8yeblikket mens man ser p\u00e5 listen deres. For \u00e5 unng\u00e5 denne s\u00e5rbarheten er det tilstrekkelig \u00e5 ikke se p\u00e5 listen over tr\u00e5dl\u00f8se nettverk fra bsdinstall\/bsdconfig.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-39461<\/a>, CVE-2026-45254<\/a> — s\u00e5rbarheter i libcasper-biblioteket (ikke i kjernen). Biblioteket er designet for sikker konfigurerbar servicelevering til prosesser som er satt i sandboksen. En av s\u00e5rbarhetene er relatert til buffer-overl\u00f8p i stakken og skade p\u00e5 stakken ved \u00e5 organisere filer med h\u00f8yere filbeskrivere i dette biblioteket (det var beregnet for beskriver opptil 1024 — standardgrensen for strukturer for systemanrop til select). Den andre s\u00e5rbarheten — muligheten til \u00e5 fjerne p\u00e5lagte begrensningslister (bibliotekets ideologi er at en gang p\u00e5lagte begrensninger kan bare styrkes) cap_net.<\/p>\n

<\/noindex><\/p>\n

De utbedrede versjonene av systemet har nummer: 14.3-RELEASE-p14, 14.4-RELEASE-p5 og 15.0-RELEASE-p9. Det er ogs\u00e5 viktig \u00e5 merke seg et viktig punkt for noen: lanseringen av FreeBSD 13.5 har nylig blitt avviklet — 30. april 2026, og det er ikke offisielle oppdateringer for den (og for 13.x-grenen generelt). Imidlertid, hvis du av en eller annen grunn ikke \u00f8nsker \u00e5 skynde deg med overgangen til 14.x-lanseringen, passer patchene for versjon 14.3 generelt til kildene til 13.5, og CVE-2026-45250 er ikke relevant for 13. grenen p\u00e5 grunn av frav\u00e6ret av setcred().<\/p>\n

<\/noindex><\/p>\n

Kilde: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435. CVE-2026-45251 — use-after-free \u0432 select-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0438\u0441\u043a\u043e\u043b\u043b\u0430\u0445, \u0435\u0441\u043b\u0438 \u0432 \u0438\u0445 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u0432 FreeBSD 15 — \u0435\u0449\u0451 \u043d\u043e\u0432\u044b\u0435 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b jail-\u043e\u0432), \u0438 \u044d\u0442\u0438 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043f\u043e\u0442\u043e\u043a\u0435 \u043f\u043e\u043a\u0430 \u043e\u0436\u0438\u0434\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u043a\u043e\u043b\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181730","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd477 nye s\u00e5rbarheter i FreeBSD | ProHoster","description":"20. mai 2026 kunngjorde utviklerne av FreeBSD at de hadde rettet syv nye s\u00e5rbarheter i systemet. Ikke alle er like farlige, men noen er sv\u00e6rt ubehagelige.","canonical_url":"https:\/\/prohoster.info\/no\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nn_NO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 FreeBSD | ProHoster","og:description":"20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435.","og:url":"https:\/\/prohoster.info\/no\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-25T18:48:14+00:00","article:modified_time":"2026-05-25T18:48:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/181730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/comments?post=181730"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/181730\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media?parent=181730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/categories?post=181730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/tags?post=181730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}