CVE-2026-49424

CVE-2026-49424 affects the Linux compatibility layer (Linuxulator, module linux(4)) in FreeBSD 14.3, 14.4, and 15.0 . The waitid() system call implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t without first zeroing it, allowing an unprivileged user to obse...

CVE-2026-49424 Kernel stack disclosure in Linux compatibility layer

The Linux waitid implementation translates a FreeBSD siginfot struct into a stack-declared Linux siginfot. It did not first zero the stack struct. An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information...

Linux Kernel 4.14.0-rc4+ - waitid() Privilege Escalation Exploit

Exploit for linux platform in category local exploits define GNUSOURCE include include include include include include include struct cred; struct taskstruct; typedef struct cred preparekernelcredt struct taskstruct daemon attributeregparm3; typedef int commitcredst struct cred new...