SecurityOnlineDo Son
Critical FreeBSD Kernel TLS flaw lets any user gain root access
Part of the CVE-2026-45257 story · since 22 Jun
- Mon 22 Jun, 01:20 UTC. SecurityOnline, first report. Critical FreeBSD Kernel TLS flaw lets any user gain root access. This article, 1st of 1.
FreeBSD has addressed a critical security flaw designated as CVE-2026-45257, which allows any unprivileged user to gain local root access due to a vulnerability in the Kernel TLS (kTLS) receive path. This vulnerability exists in versions 13.0 through 13.4, 14.0 through 14.2, and 15.0-RELEASE of FreeBSD, affecting multiple architectures. The flaw permits escalation without needing complex setups, simply requiring stock system configurations.
A public proof-of-concept exploit has been released, highlighting the urgency for patching the issue to protect systems. Workarounds are available if immediate patching isn't possible, and the flaw was disclosed on June 10, 2026.
How the story developed
1 article from 1 outlet since 22 Jun. Quiet since 22 Jun. This was the first report.
- Mon 22 Jun, 01:20 UTC. SecurityOnline, first report. Critical FreeBSD Kernel TLS flaw lets any user gain root access. This article, 1st of 1.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 1 articles as a listHide the list
- Mon 22 JunDay 01
- Critical FreeBSD Kernel TLS flaw lets any user gain root access01:20 · SecurityOnline · First report · This article, 1st of 1