{"id":182553,"date":"2026-07-08T22:53:54","date_gmt":"2026-07-08T20:53:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/novye-uyazvimosti-freebsd"},"modified":"2026-07-08T22:53:54","modified_gmt":"2026-07-08T20:53:54","slug":"novye-uyazvimosti-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/no\/blog\/news\/novye-uyazvimosti-freebsd","title":{"rendered":"Nye s\u00e5rbarheter i FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex>          <a rel=\"nofollow\" id=\"memories_button\" href=\"#\" title=\"Overv\u00e5ke\"><i class=\"icon-bell\"><\/i><\/a><br \/>2                            <\/p>\n<p>30. juni 2026 ble det publisert varsler om retting av 13 nye s\u00e5rbarheter i FreeBSD OS.<\/p>\n<ul>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:37.vm.asc\">CVE-2026-49418<\/a>. En bruker med tilgang til en enhet med minnekartlagt grensesnitt kan for\u00e5rsake double-free\/use-after-free i kjernen. Dette kan sannsynligvis f\u00f8re til heving av privilegier. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:38.jail.asc\">CVE-2026-49419<\/a>. (kun FreeBSD 15+) Dobbelt reduksjon av refcount for n\u00e5v\u00e6rende jail ved behandling av en feil n\u00e5r man f\u00e5r tilgang til en annen jail via jail-descriptor (innf\u00f8rt i FreeBSD 15), som til slutt f\u00f8rer til utilsiktet frigj\u00f8ring av kontrollstrukturen for jail og p\u00e5f\u00f8lgende use-after-free der den brukes. Teoretisk kan dette f\u00f8re til heving av privilegier. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:39.execve.asc\">CVE-2026-49415<\/a>. N\u00e5r man kj\u00f8rer et setuid-program, settes tilgangsrettighetene til minnet litt senere enn denne minnet initieres, noe som gj\u00f8r det mulig \u00e5 f\u00e5 tilgang til den og redigere den i en kort tidsperiode uten n\u00f8dvendige privilegier, via procfs eller linprocfs. I de fleste systemer er procfs, og spesielt libprocfs, ikke montert, s\u00e5 problemet ang\u00e5r trolig ikke s\u00e5 mange. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:40.zfs.asc\">CVE-2026-49429, CVE-2026-49430, CVE-2026-49431<\/a>. (kun for systemer med ZFS) De f\u00f8rste to feilene er relatert til tildeling av minne med feil st\u00f8rrelse: en buffer av st\u00f8rrelse overf\u00f8rt som et 32-bits tall allokeres, og deretter skrives data av virkelig st\u00f8rrelse til det, noe som f\u00f8rer til overflyt hvis den faktiske bufferst\u00f8rrelsen var st\u00f8rre enn 4GB. Begge kan bare utl\u00f8ses av root eller en bruker med eksplisitt tildelte privilegier for s\u00e5rbare operasjoner. Den tredje feilen kan utnyttes av hvem som helst; den lar noen som helst sette et flagg p\u00e5 datasettet &#171;$hasrecvd&#187; ved hjelp av ZFS_IOC_SET_PROP (hvor farlig det er, er uklart fra kunngj\u00f8ringen). <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:41.libalias.asc\">CVE-2026-49420<\/a>. Manglende tilstrekkelig sjekk av pakke st\u00f8rrelse f\u00f8r den skrives til en fast st\u00f8rrelse buffer i stakken i libalias-modulen for RTSP-st\u00f8tte f\u00f8rer til muligheten for \u00e5 gi et fjerntilgang og uten autorisasjon til \u00e5 overflyte enten kjernen (for ipfw nat) eller prosessen natd (som vanligvis kj\u00f8rer som root). Kan potensielt f\u00f8re til RCE. S\u00e5rbarheten kan utl\u00f8ses av en ondsinnet vert innen det lokale nettverket bak NAT, implementert via libalias, som sender skadelige RTSP-pakker. F\u00f8lgelig ber\u00f8rer ikke s\u00e5rbarheten verter hvor NAT ikke er aktivert p\u00e5 noen m\u00e5te. Dessuten: natd vil ikke lenger v\u00e6re s\u00e5rbart dersom linjen libalias_smedia.so fjernes fra \/etc\/libalias.conf og natd startes p\u00e5 nytt, og ipfw nat vil ikke v\u00e6re s\u00e5rbart uten lasting av modulen alias_smedia.ko (det er ikke spesifisert om den kan laste den automatisk). I tillegg ser den s\u00e5rbare behandleren kun p\u00e5 TCP\/UDP-pakker som g\u00e5r ut, med en av portene 554 eller 7070 \u2014 hvis disse pakkene blokkeres f\u00f8r de n\u00e5r NAT, forsvinner ogs\u00e5 s\u00e5rbarheten. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:42.unlinkat.asc\">CVE-2026-49421<\/a>. unlinkat() og funlinkat() tok ikke hensyn til flagget AT_RESOLVE_BENEATH, som skulle hindre at man ved navigering av denne stien gikk ut av katalogen angitt av dirfd-argumentet. Dette tillot dermed \u00e5 slette filer utenfor katalogen n\u00e5r den koden som kalte den \u00f8nsket \u00e5 innf\u00f8re denne begrensningen. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:43.tcp.asc\">CVE-2026-49422<\/a>. Rase i tcp_rack.ko-modulen (som som standard ikke er lastet). Hver tcp-socket kan individuelt velge hvilken tcp-stakk den vil operere gjennom, inkludert \u00e5 bytte dem i fart. Hvis man gj\u00f8r f\u00f8lgende: 1) p\u00e5 en socket med tcp_rack kaller man rack-spesifikk setsockopt(), 2) i en annen tr\u00e5d rekker vi \u00e5 bytte tcp-stakken fra rack til en annen og s\u00e5 bytte tilbake til rack p\u00e5 det riktige tidspunktet, vil rack-handleren for setsockopt() fungere med den gamle (f\u00f8r bytte) adressen til socketens tilstandsstruktur, noe som f\u00f8rer til minneskorrupsjon og mulig heving av privilegier. Dette er bare s\u00e5rbare systemer hvor tcp_rack.ko er eksplisitt lastet, dette er ikke standard.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:44.posixshm.asc\">CVE-2026-49427, CVE-2026-49428<\/a>. POSIX largepages (shm_create_largepage) ble ved allokering ikke markert tilstrekkelig som brukt, noe som kunne f\u00f8re til feilaktig frigj\u00f8ring under forskjellige omstendigheter (nevnt er sendfile-anrop med flagget SF_NOCACHE, open med flagget O_TRUNC og fspacectl) og p\u00e5f\u00f8lgende use-after-free med vanlige konsekvenser.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:45.audit.asc\">CVE-2026-49426<\/a>. Feilaktige audit(4) logger om fjerning av syscalls via ptrace(PT_SC_REMOTE). Kan forvirre systemer som analyserer mistenkelige hendelser, hvis slike benyttes.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:46.ktls.asc\">CVE-2026-49423<\/a>. Potensiell kernel-panic ved mottak av data gjennom kTLS med deltagelse av TLS 1.2 CBC-poster. For \u00e5 unng\u00e5 problemet kan man sette kern.ipc.tls.enable=0 eller kern.ipc.tls.cbc_enable=0.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:47.linux.asc\">CVE-2026-49424<\/a>. Datainnbrudd (104 byte) fra kjernestakken ved anrop av linux-compat waitid(), som glemmer \u00e5 nullstille den ubrukte delen av linux-strukturen siginfo_t n\u00e5r data fra freebsd-strukturen overf\u00f8res til den. I vanlige GENERIC-kjerner er linux-emulatoren som standard deaktivert, og aktiveres kun med manuell lasting av modul.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:48.compat32.asc\">CVE-2026-49425<\/a>. I likhet med det forrige, glemmer 32-bits kevent \u00e5 nullstille den 32-bits strukturen f\u00f8r data fra den native 64-bits strukturen overf\u00f8res, noe som f\u00f8rer til datainnbudd fra stakken. Som standard er 32-bits kompatibilitet i kjernen aktivert (ikke modul).<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:49.iconv.asc\">CVE-2026-58081, CVE-2026-58082<\/a>. S\u00e5rbarheter i iconv. Den f\u00f8rste: mange av modulene sjekker ikke st\u00f8rrelsen p\u00e5 den utleverte utdata-bufferen f\u00f8r de skriver resultatet til den (nevnt HZ, UTF-7, VIQR, ZW). Den andre: ISO-2022-modulen bruker en 6-byte buffer i stakken for interne operasjoner, men kan ta imot opp til 10 byte, og \u00f8delegger stakken. Som et resultat kan kj\u00f8ring av iconv for konvertering til eller fra en av de nevnte kodene med uvaliderte innganger v\u00e6re utsatt for buffer-overl\u00f8p. <\/li>\n<\/ul>\n<p>Kilde: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18335229\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421 FreeBSD. CVE-2026-49418. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 memory-mapped \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043c\u043e\u0436\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c double-free\/use-after-free \u0432 \u044f\u0434\u0440\u0435. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. CVE-2026-49419. (\u0442\u043e\u043b\u044c\u043a\u043e FreeBSD 15+) \u0414\u0432\u043e\u0439\u043d\u043e\u0435 \u0443\u043c\u0435\u043d\u044c\u0448\u0435\u043d\u0438\u0435 refcount \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e jail-\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443 jail \u043f\u043e jail [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182553","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Emin Berklin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/no\/blog\/news\/novye-uyazvimosti-freebsd\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"nn_NO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 FreeBSD | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/no\/blog\/news\/novye-uyazvimosti-freebsd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-08T20:53:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-08T20:53:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Nye s\u00e5rbarheter i FreeBSD | ProHoster","description":"Den 30. juni 2026 ble det publisert varsler om retting av 13 nye s\u00e5rbarheter i OS.","canonical_url":"https:\/\/prohoster.info\/no\/blog\/news\/novye-uyazvimosti-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nn_NO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 FreeBSD | ProHoster","og:description":"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421.","og:url":"https:\/\/prohoster.info\/no\/blog\/news\/novye-uyazvimosti-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-08T20:53:54+00:00","article:modified_time":"2026-07-08T20:53:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182553","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:06","updated":"2026-08-05 12:22:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/182553","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/comments?post=182553"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/182553\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media?parent=182553"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/categories?post=182553"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/tags?post=182553"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}