Beat
FreeBSD
FreeBSD OS and ports ecosystem news
A shared-memory page-size race can escalate privileges
POSIX shared memory can back an object with large pages. Two callers could set the page size at once, leave the object inconsistent, and escalate privileges.
A terminal ioctl race can escalate privileges
The kernel's terminal layer can drop a lock while attaching a controlling terminal. A local user can race that window and escalate privileges.
Base OpenSSL picks up a batch of memory and protocol bugs
FreeBSD ships OpenSSL in the base system. The signed advisory lists a heap overflow, a double free, and remote paths that can exhaust memory, with impact from denial of service up to possible remote code execution.
The sound driver can escalate privileges when two devices start together
The sound driver can start several audio devices at once. With more than one device, a local user could hit a use-after-free and escalate privileges.
A local socket bug can escalate privileges on FreeBSD 15
Unix sockets are how programs on the same machine pass messages and file descriptors. A receive-path bug could free a message and then still use it, and the advisory says a local user can escalate privileges.
FreeBSD's userland PPP daemon overflowed on a crafted peer option
The userland PPP program is the old dial-up and point-to-point helper still in the base system. A peer could send a malformed endpoint option and the daemon would write past its buffers.