CVE-2026-49424

The Linuxulator's waitid() syscall translates a FreeBSD siginfo_t into a stack-declared Linux siginfo_t without zeroing it first, leaking 104 bytes of uninitialized kernel stack data to unprivileged users. Affected: FreeBSD 14.3, 14.4, and 15.0. No workaround exists; systems not using the Linux b...