CVE-2026-58086

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-58086", "assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "state": "PUBLISHED", "assignerShortName": "freebsd", "dateReserved": "2026-06-29T01:40:17.498Z", "datePublished": "2026-08-19T07:42:10.902Z", "dateUpdated": "2026-08-27T15:54:55.678Z"}, "containers": {"cna": {"datePublic": "2026-07-29T22:40:00.000Z", "title": "ktrace(2) privilege incorrectly validated in jails", "references": [{"tags": ["vendor-advisory"], "url": "https://security.freebsd.org/advisories/FreeBSD-SA-26:53.ktrace.asc"}], "affected": [{"defaultStatus": "unknown", "modules": ["ktrace"], "product": "FreeBSD", "vendor": "FreeBSD", "versions": [{"status": "affected", "versionType": "release", "version": "15.1-RELEASE", "lessThan": "p2"}, {"status": "affected", "versionType": "release", "version": "15.0-RELEASE", "lessThan": "p12"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Alexander Leidinger"}], "descriptions": [{"lang": "en", "value": "As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged.\n\nAn unprivileged user in a jail that has permission to debug the target process can modify the jailed root user's ktrace(2) flags, or disable tracing outright. A jailed root user therefore cannot reliably trace unprivileged processes."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-273", "description": "CWE-273: Improper Check for Dropped Privileges", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd", "dateUpdated": "2026-08-19T07:42:10.902Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-08-27T15:54:51.867264Z", "id": "CVE-2026-58086", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-27T15:54:55.678Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-58086", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-27T15:54:51.867264Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-27T15:54:40.488Z"}}], "cna": {"title": "ktrace(2) privilege incorrectly validated in jails", "credits": [{"lang": "en", "type": "finder", "value": "Alexander Leidinger"}], "affected": [{"vendor": "FreeBSD", "modules": ["ktrace"], "product": "FreeBSD", "versions": [{"status": "affected", "version": "15.1-RELEASE", "lessThan": "p2", "versionType": "release"}, {"status": "affected", "version": "15.0-RELEASE", "lessThan": "p12", "versionType": "release"}], "defaultStatus": "unknown"}], "datePublic": "2026-07-29T22:40:00.000Z", "references": [{"url": "https://security.freebsd.org/advisories/FreeBSD-SA-26:53.ktrace.asc", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged.\n\nAn unprivileged user in a jail that has permission to debug the target process can modify the jailed root user's ktrace(2) flags, or disable tracing outright. A jailed root user therefore cannot reliably trace unprivileged processes."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-273", "description": "CWE-273: Improper Check for Dropped Privileges"}]}], "providerMetadata": {"orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd", "dateUpdated": "2026-08-19T07:42:10.902Z"}}}, "cveMetadata": {"cveId": "CVE-2026-58086", "state": "PUBLISHED", "dateUpdated": "2026-08-27T15:54:55.678Z", "dateReserved": "2026-06-29T01:40:17.498Z", "assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "datePublished": "2026-08-19T07:42:10.902Z", "assignerShortName": "freebsd"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "modules": ["ktrace"], "product": "FreeBSD", "vendor": "FreeBSD", "versions": [{"lessThan": "p2", "status": "affected", "version": "15.1-RELEASE", "versionType": "release"}, {"lessThan": "p12", "status": "affected", "version": "15.0-RELEASE", "versionType": "release"}]}], "source": "secteam@freebsd.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:-:*:*:*:*:*:*", "matchCriteriaId": "368CFE5D-C5C2-42AF-AAF4-28DFE1A59C3B", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p1:*:*:*:*:*:*", "matchCriteriaId": "AA4AAA57-70A7-4717-ACF2-A253E757FF2C", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p10:*:*:*:*:*:*", "matchCriteriaId": "683CEB32-A634-4363-86FB-2BDC59724E3E", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p11:*:*:*:*:*:*", "matchCriteriaId": "9EC8EE3F-9992-4A0F-A0CD-3B44BA086BD2", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p2:*:*:*:*:*:*", "matchCriteriaId": "E24ABFA6-4D12-4DE5-832B-438502C7D188", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p3:*:*:*:*:*:*", "matchCriteriaId": "C1C9869C-494B-4628-9AA3-4AA5B989C377", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p4:*:*:*:*:*:*", "matchCriteriaId": "002AA2FE-C7BA-471A-9434-0E56A878ACBF", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p5:*:*:*:*:*:*", "matchCriteriaId": "B187670D-E3A2-4A0D-A653-982F8B447E78", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p6:*:*:*:*:*:*", "matchCriteriaId": "047E7EE9-FB51-4CF2-A8BE-484BFD819565", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p7:*:*:*:*:*:*", "matchCriteriaId": "2C9768AE-9954-4B2A-9525-D7D4942406E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p8:*:*:*:*:*:*", "matchCriteriaId": "F8B9EF55-3755-452A-B067-043803099B22", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.0:p9:*:*:*:*:*:*", "matchCriteriaId": "EE3C4F40-A117-4B37-8CDD-096A1A763630", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.1:-:*:*:*:*:*:*", "matchCriteriaId": "BD327D43-A2DC-49B5-A578-D2116E1E12F3", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.1:p1:*:*:*:*:*:*", "matchCriteriaId": "E379873C-DA04-4EAA-ABF6-EB87B4B471A8", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "BF16D01F-95EC-4FE3-B32D-135CB82E8391", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:15.1:rc3-p1:*:*:*:*:*:*", "matchCriteriaId": "75973F7C-645A-438C-A03B-C77AAAD20C15", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged.\n\nAn unprivileged user in a jail that has permission to debug the target process can modify the jailed root user's ktrace(2) flags, or disable tracing outright. A jailed root user therefore cannot reliably trace unprivileged processes."}, {"lang": "es", "value": "Como un efecto secundario inadvertido de un cambio de c\u00f3digo no relacionado, PRIV_KTRACE siempre se le deneg\u00f3 a un usuario root enjaulado. El rastreo configurado por un usuario root enjaulado, por lo tanto, no se marc\u00f3 como privilegiado.\n\nUn usuario sin privilegios en una jaula que tiene permiso para depurar el proceso objetivo puede modificar las banderas de ktrace(2) del usuario root enjaulado, o deshabilitar el rastreo por completo. Un usuario root enjaulado, por lo tanto, no puede rastrear de forma fiable procesos sin privilegios."}], "id": "CVE-2026-58086", "lastModified": "2026-10-27T12:10:00.343", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-58086", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-27T15:54:51.867264Z", "version": "2.0.3"}}]}, "published": "2026-08-19T08:17:12.777", "references": [{"source": "secteam@freebsd.org", "tags": ["Vendor Advisory"], "url": "https://security.freebsd.org/advisories/FreeBSD-SA-26:53.ktrace.asc"}], "sourceIdentifier": "secteam@freebsd.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-273"}], "source": "secteam@freebsd.org", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[15.1-RELEASE,p2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[15.0-RELEASE,p12)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "FreeBSD", "source": "cna", "vendor": "FreeBSD"}, "product": "freebsd", "vendor": "freebsd"}], "created": "2026-08-19T10:45:03.772958+00:00", "updated": "2026-08-27T19:15:03.662598+00:00", "vendors": ["freebsd", "freebsd$PRODUCT$freebsd"]}