CVE-2026-49421

The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but failed to pass it through to the underlying path lookup. The flag was silently dropped, so path resolution was not actually restricted. A process that uses ATRESOLVEBENEATH with unlinkat2 or...

CVE-2026-49421

The FreeBSD kernel is vulnerable in the unlinkat(2) and funlinkat(2) system calls because they validate the AT_RESOLVE_BENEATH flag but fail to pass it to the underlying path lookup. Because this flag is silently dropped, path resolution is not restricted, allowing a process to resolve paths abov...

CVE-2026-49421 unlinkat(2) ignores AT_RESOLVE_BENEATH flag

The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but failed to pass it through to the underlying path lookup. The flag was silently dropped, so path resolution was not actually restricted. A process that uses ATRESOLVEBENEATH with unlinkat2 or...

CVE-2026-49421 unlinkat(2) ignores AT_RESOLVE_BENEATH flag

The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but failed to pass it through to the underlying path lookup. The flag was silently dropped, so path resolution was not actually restricted. A process that uses ATRESOLVEBENEATH with unlinkat2 or...

EUVD-2026-62243

The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but failed to pass it through to the underlying path lookup. The flag was silently dropped, so path resolution was not actually restricted. A process that uses ATRESOLVEBENEATH with unlinkat2 or...

CVE-2026-49421: Improper Check for Dropped Privileges

The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but failed to pass it through to the underlying path lookup. The flag was silently dropped, so path resolution was not actually restricted. A process that uses ATRESOLVEBENEATH with unlinkat2 or...

The vulnerability of system calls unlinkat and funlinkat in the kernels of FreeBSD allows a attacker to compromise the integrity of the protected information.

The vulnerability of the unlinkat and funlinkat system calls in FreeBSD operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

FreeBSD : FreeBSD -- unlinkat(2) ignores AT_RESOLVE_BENEATH flag (33fd66d1-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 33fd66d1-74e2-11f1-958d-bc241121aa0a advisory. The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but...

FreeBSD-SA-26:42.unlinkat

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:42.unlinkat Security Advisory The FreeBSD Project Topic: unlinkat2 ignores ATRESOLVEBENEATH flag Category: core Module: unlinkat Announced: 2026-06-30...

PT-2026-70015

Name of the Vulnerable Software and Affected Versions FreeBSD kernel affected versions not specified Description The kernel functions implementing unlinkat2 and funlinkat2 fail to pass the AT RESOLVE BENEATH flag to the underlying path lookup process. Although the flag is validated, it is silentl...

FreeBSD -- unlinkat(2) ignores AT_RESOLVE_BENEATH flag

Problem Description: The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but failed to pass it through to the underlying path lookup. The flag was silently dropped, so path resolution was not actually restricted. Impact: A process that uses...

FreeBSD Security Advisory - FreeBSD-SA-26:42.unlinkat

FreeBSD Security Advisory - The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but failed to pass it through to the underlying path lookup. The flag was silently dropped, so path resolution was not actually restricted...

The vulnerability of the unlinkat() function in package managers Nix, Lix, and Guix allows attackers to increase their privileges.

The vulnerability of the unlinkat function in Nix, Lix, and Guix is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to increase their privileges...

Configure Audit Rules for File Deletion

Generally, it is highly risky to delete files in the OS. Misoperations by administrators or attacks may cause severe system faults. You are advised to audit and monitor system calls, such as rename, unlink, unlinkat, and renameat, and record deletion operation logs. Deleting system or service fil...