CVE-2026-49423

The FreeBSD kernel's KTLS subsystem is vulnerable to a remote denial of service due to an uninitialized memory access in the ktls_ocf_tls_cbc_decrypt() function. When processing a received TLS 1.2 CBC record , the function incorrectly increments the iovec index for all mbufs in the chain, includi...

CVE-2026-49423 Remote DOS via uninitialized memory access in KTLS receive

When building the iovec array for a received TLS 1.2 CBC record, ktlsocftlscbcdecrypt incremented the iovec index for every mbuf in the chain, including mbufs that were skipped because they contained only TLS header bytes. This left uninitialized entries in the iovec array. The iovec array was...

FreeBSD-SA-26:46.ktls

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:46.ktls Security Advisory The FreeBSD Project Topic: Remote DOS via uninitialized memory access in KTLS receive Category: core Module: ktls Announced:...