Lucene search
K

CVE-2026-45250

🗓️ 21 May 2026 08:37:17Reported by freebsdType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 81 Views🌐 WEB

Unprivileged user can overflow kernel stack via setcred(2) by oversized groups, enabling escalation.

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
FreeBSD
FreeBSD -- Stack buffer overflow via setcred(2)
20 May 202600:00
freebsd
ATTACKERKB
CVE-2026-45250
21 May 202608:37
attackerkb
GithubExploit
Exploit for CVE-2026-45250
21 May 202604:40
githubexploit
Circl
CVE-2026-45250
21 May 202605:00
circl
CNNVD
FreeBSD 安全漏洞
21 May 202600:00
cnnvd
Cvelist
CVE-2026-45250 Stack buffer overflow via setcred(2)
21 May 202608:37
cvelist
EUVD
EUVD-2026-31252
21 May 202608:37
euvd
FreeBSD Advisory
FreeBSD-SA-26:18.setcred
20 May 202600:00
freebsd_advisory
Tenable Nessus
FreeBSD : FreeBSD -- Stack buffer overflow via setcred(2) (39728e41-54b5-11f1-8d7a-bc241121aa0a)
21 May 202600:00
nessus
NVD
CVE-2026-45250
21 May 202609:16
nvd
Rows per page
NVD
Node
freebsdfreebsdMatch14.3-
OR
freebsdfreebsdMatch14.3p1
OR
freebsdfreebsdMatch14.3p10
OR
freebsdfreebsdMatch14.3p11
OR
freebsdfreebsdMatch14.3p12
OR
freebsdfreebsdMatch14.3p13
OR
freebsdfreebsdMatch14.3p2
OR
freebsdfreebsdMatch14.3p3
OR
freebsdfreebsdMatch14.3p4
OR
freebsdfreebsdMatch14.3p5
OR
freebsdfreebsdMatch14.3p6
OR
freebsdfreebsdMatch14.3p7
OR
freebsdfreebsdMatch14.3p8
OR
freebsdfreebsdMatch14.3p9
OR
freebsdfreebsdMatch14.4-
OR
freebsdfreebsdMatch14.4p1
OR
freebsdfreebsdMatch14.4p2
OR
freebsdfreebsdMatch14.4p3
OR
freebsdfreebsdMatch14.4p4
OR
freebsdfreebsdMatch14.4rc1
OR
freebsdfreebsdMatch15.0-
OR
freebsdfreebsdMatch15.0p1
OR
freebsdfreebsdMatch15.0p2
OR
freebsdfreebsdMatch15.0p3
OR
freebsdfreebsdMatch15.0p4
OR
freebsdfreebsdMatch15.0p5
OR
freebsdfreebsdMatch15.0p6
OR
freebsdfreebsdMatch15.0p7
OR
freebsdfreebsdMatch15.0p8
[
  {
    "defaultStatus": "unknown",
    "modules": [
      "setcred"
    ],
    "product": "FreeBSD",
    "vendor": "FreeBSD",
    "versions": [
      {
        "status": "affected",
        "versionType": "release",
        "version": "15.0-RELEASE",
        "lessThan": "p9"
      },
      {
        "status": "affected",
        "versionType": "release",
        "version": "14.4-RELEASE",
        "lessThan": "p5"
      },
      {
        "status": "affected",
        "versionType": "release",
        "version": "14.3-RELEASE",
        "lessThan": "p14"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
supplementary_groups_list_sizebinaryexploits/exp2_lpe_no_smap.cFull LPE PoC for setcred(2) on no-SMAP/SMEP kernel.CWE-121
setcred(2) syscall usagebinaryexploits/exp2_lpe_no_smap.cFull LPE PoC for setcred(2) on no-SMAP/SMEP kernel.CWE-121
pargs slab plantingbinaryexploits/exp_setcred_smap_zfs.cSMAP/SMEP-safe LPE via zfs.ko gadget on FreeBSD 14.4+.CWE-121
rcx/K1 gadget usagebinaryexploits/exp_setcred_smap_zfs.cSMAP/SMEP-safe LPE via zfs.ko gadget on FreeBSD 14.4+.CWE-121
setcred(2) syscall path to ZSTD gadgetbinaryexploits/exp_setcred_smap_zfs.cSMAP/SMEP-safe LPE via zfs.ko gadget on FreeBSD 14.4+.CWE-121

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 May 2026 08:16Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.17.8
EPSS0.00007
SSVC
81