EUVD-2026-62344

When building the iovec array for a received TLS 1.2 CBC record, ktlsocftlscbcdecrypt incremented the iovec index for every mbuf in the chain, including mbufs that were skipped because they contained only TLS header bytes. This left uninitialized entries in the iovec array. The iovec array was...

CVE-2026-49423

The FreeBSD kernel's KTLS subsystem is vulnerable to a remote denial of service due to an uninitialized memory access in the ktls_ocf_tls_cbc_decrypt() function. When processing a received TLS 1.2 CBC record , the function incorrectly increments the iovec index for all mbufs in the chain, includi...

PT-2026-70016

When building the iovec array for a received TLS 1.2 CBC record, ktls ocf tls cbc decrypt incremented the iovec index for every mbuf in the chain, including mbufs that were skipped because they contained only TLS header bytes. This left uninitialized entries in the iovec array. The iovec array wa...