FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

FreeBSD -- ktrace(2) privilege incorrectly validated in jails

Affected packages
15.1 <= FreeBSD-kernel < 15.1_2
15.0 <= FreeBSD-kernel < 15.0_12

Details

VuXML ID 73482c83-8bb8-11f1-a6ab-bc241121aa0a
Discovery 2026-07-29
Entry 2026-07-30

Problem Description:

As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged.

Impact:

An unprivileged user in a jail that has permission to debug the target process can modify the jailed root user's ktrace(2) flags, or disable tracing outright. A jailed root user therefore cannot reliably trace unprivileged processes.

References

CVE Name CVE-2026-58086
FreeBSD Advisory SA-26:53.ktrace