CVE-2026-101304

The FreeBSD operating system is vulnerable to a multiple jail filesystem root escape due to three flaws in how file descriptors are handled. Specifically, when fdescfs(4) is mounted in a jail with the "nodup" option, opening /dev/fd/N returns a descriptor that fails to inherit FD_RESOLVE_BENEATH ...