ISOMAN

CVE

CVE-2026-7270

An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug may be exploitable by an unprivileged user to obtain superuser privileges.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
FreeBSD15.0-RELEASE amd64 bootonlyunknownsource
FreeBSD15.0-RELEASE amd64 disc1unknownsource
FreeBSD15.0-RELEASE amd64 dvd1unknownsource
FreeBSD15.0-RELEASE amd64 memstickunknownsource
FreeBSD15.0-RELEASE amd64 mini-memstickunknownsource
FreeBSD15.0-RELEASE aarch64 pine64-ltsunknownsource
FreeBSD15.0-RELEASE aarch64 pine64unknownsource
FreeBSD15.0-RELEASE aarch64 pinebookunknownsource
FreeBSD15.0-RELEASE aarch64 rock64unknownsource
FreeBSD15.0-RELEASE aarch64 rockpro64unknownsource
FreeBSD15.0-RELEASE aarch64 rpiunknownsource
FreeBSD15.0-RELEASE aarch64 bootonlyunknownsource
FreeBSD15.0-RELEASE aarch64 disc1unknownsource
FreeBSD15.0-RELEASE aarch64 dvd1unknownsource
FreeBSD15.0-RELEASE aarch64 memstickunknownsource
FreeBSD15.0-RELEASE aarch64 mini-memstickunknownsource
FreeBSD15.0-RELEASE powerpc64 bootonlyunknownsource
FreeBSD15.0-RELEASE powerpc64 disc1unknownsource
FreeBSD15.0-RELEASE powerpc64le bootonlyunknownsource
FreeBSD15.0-RELEASE powerpc64le disc1unknownsource
FreeBSD15.0-RELEASE riscv64 genericsdunknownsource
FreeBSD15.0-RELEASE riscv64 bootonlyunknownsource
FreeBSD15.0-RELEASE riscv64 disc1unknownsource
FreeBSD15.0-RELEASE riscv64 memstickunknownsource
FreeBSD15.0-RELEASE riscv64 mini-memstickunknownsource
FreeBSD14.4-RELEASE amd64 bootonlyunknownsource
FreeBSD14.4-RELEASE amd64 disc1unknownsource
FreeBSD14.4-RELEASE amd64 dvd1unknownsource
FreeBSD14.4-RELEASE amd64 memstickunknownsource
FreeBSD14.4-RELEASE amd64 mini-memstickunknownsource
FreeBSD14.4-RELEASE aarch64 pine64-ltsunknownsource
FreeBSD14.4-RELEASE aarch64 pine64unknownsource
FreeBSD14.4-RELEASE aarch64 pinebookunknownsource
FreeBSD14.4-RELEASE aarch64 rock64unknownsource
FreeBSD14.4-RELEASE aarch64 rockpro64unknownsource
FreeBSD14.4-RELEASE aarch64 rpiunknownsource
FreeBSD14.4-RELEASE aarch64 bootonlyunknownsource
FreeBSD14.4-RELEASE aarch64 disc1unknownsource
FreeBSD14.4-RELEASE aarch64 dvd1unknownsource
FreeBSD14.4-RELEASE aarch64 memstickunknownsource
FreeBSD14.4-RELEASE aarch64 mini-memstickunknownsource
FreeBSD14.4-RELEASE i386 bootonlyunknownsource
FreeBSD14.4-RELEASE i386 disc1unknownsource
FreeBSD14.4-RELEASE i386 dvd1unknownsource
FreeBSD14.4-RELEASE i386 memstickunknownsource
FreeBSD14.4-RELEASE i386 mini-memstickunknownsource
FreeBSD14.4-RELEASE powerpc bootonlyunknownsource
FreeBSD14.4-RELEASE powerpc disc1unknownsource
FreeBSD14.4-RELEASE powerpc64 bootonlyunknownsource
FreeBSD14.4-RELEASE powerpc64 disc1unknownsource
FreeBSD14.4-RELEASE powerpc64le bootonlyunknownsource
FreeBSD14.4-RELEASE powerpc64le disc1unknownsource
FreeBSD14.4-RELEASE riscv64 genericsdunknownsource
FreeBSD14.4-RELEASE riscv64 bootonlyunknownsource
FreeBSD14.4-RELEASE riscv64 disc1unknownsource
FreeBSD14.4-RELEASE riscv64 memstickunknownsource
FreeBSD14.4-RELEASE riscv64 mini-memstickunknownsource
FreeBSD14.3-RELEASE amd64 bootonlyunknownsource
FreeBSD14.3-RELEASE amd64 disc1unknownsource
FreeBSD14.3-RELEASE amd64 dvd1unknownsource
FreeBSD14.3-RELEASE amd64 memstickunknownsource
FreeBSD14.3-RELEASE amd64 mini-memstickunknownsource
FreeBSD14.3-RELEASE aarch64 pine64-ltsunknownsource
FreeBSD14.3-RELEASE aarch64 pine64unknownsource
FreeBSD14.3-RELEASE aarch64 pinebookunknownsource
FreeBSD14.3-RELEASE aarch64 rock64unknownsource
FreeBSD14.3-RELEASE aarch64 rockpro64unknownsource
FreeBSD14.3-RELEASE aarch64 rpiunknownsource
FreeBSD14.3-RELEASE aarch64 bootonlyunknownsource
FreeBSD14.3-RELEASE aarch64 disc1unknownsource
FreeBSD14.3-RELEASE aarch64 dvd1unknownsource
FreeBSD14.3-RELEASE aarch64 memstickunknownsource
FreeBSD14.3-RELEASE aarch64 mini-memstickunknownsource
FreeBSD14.3-RELEASE i386 bootonlyunknownsource
FreeBSD14.3-RELEASE i386 disc1unknownsource
FreeBSD14.3-RELEASE i386 dvd1unknownsource
FreeBSD14.3-RELEASE i386 memstickunknownsource
FreeBSD14.3-RELEASE i386 mini-memstickunknownsource
FreeBSD14.3-RELEASE powerpc bootonlyunknownsource
FreeBSD14.3-RELEASE powerpc disc1unknownsource
FreeBSD14.3-RELEASE powerpc64 bootonlyunknownsource
FreeBSD14.3-RELEASE powerpc64 disc1unknownsource
FreeBSD14.3-RELEASE powerpc64le bootonlyunknownsource
FreeBSD14.3-RELEASE powerpc64le disc1unknownsource
FreeBSD14.3-RELEASE riscv64 genericsdunknownsource
FreeBSD14.3-RELEASE riscv64 bootonlyunknownsource
FreeBSD14.3-RELEASE riscv64 disc1unknownsource
FreeBSD14.3-RELEASE riscv64 memstickunknownsource
FreeBSD14.3-RELEASE riscv64 mini-memstickunknownsource

References

  1. https://security.freebsd.org/advisories/FreeBSD-SA-26:13.exec.asc
  2. https://blog.calif.io/p/cve-2026-7270-how-i-get-root-on-freebsd
  3. https://news.ycombinator.com/item?id=48077971