CVE-2026-58086

The FreeBSD kernel (versions 15.1 and 15.0) is vulnerable to a flaw where PRIV_KTRACE is always denied to a jailed root user. This incorrect validation occurs because a side effect of an unrelated code change prevents jailed root users from flagging tracing configurations as privileged. Consequen...

CVE-2026-58086: Improper Check for Dropped Privileges

As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed roo...