CVE-2026-49421

CVE-2026-49421 affects the FreeBSD kernel in all supported versions. The kernel function implementing unlinkat(2) and funlinkat(2) validated the AT_RESOLVE_BENEATH flag but failed to pass it to the underlying path lookup, silently dropping it. As a result, path resolution is not actually confined...

FreeBSD-SA-26:42.unlinkat

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:42.unlinkat Security Advisory The FreeBSD Project Topic: unlinkat2 ignores ATRESOLVEBENEATH flag Category: core Module: unlinkat Announced: 2026-06-30...