CVE-2026-49423

FreeBSD 's KTLS (Kernel TLS) subsystem contains an uninitialized memory access in ktls_ocf_tls_cbc_decrypt(). When building the iovec array for a received TLS 1.2 CBC record, the function incremented the index for every mbuf in the chain, including those skipped because they held only the 5-byte ...