6 matches found
CVE-2026-58092 Unauthorized credential switching
In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This change was largely...
CVE-2026-58092
In FreeBSD 15.0 , a regression in the group_is_primary() function allows for unauthorized credential switching via the mac_do policy module. Due to a kernel structure change where the primary group ID was moved to a dedicated field, the function incorrectly retrieves the ID from the first element...
CVE-2026-58092 Unauthorized credential switching
In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This change was largely...
FreeBSD : FreeBSD -- Unauthorized credential switching (55fbe7b1-a0fe-11f1-ae1f-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 55fbe7b1-a0fe-11f1-ae1f-bc241121aa0a advisory. In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primar...
FreeBSD -- Unauthorized credential switching
Problem Description: In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This...
FreeBSD-SA-26:59.mac_do
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:59.macdo Security Advisory The FreeBSD Project Topic: Unauthorized credential switching Category: core Module: macdo Announced: 2026-08-25 Credits: Hazley...