CVE-2026-101304

7.1 Élevée

Publiée le 15/10/2026 à 09:17 · Modifiée le 20/10/2026 à 19:17 · Modifiée · Source : secteam@freebsd.org

Description

When fdescfs(4) was mounted in a jail with the "nodup" option, opening /dev/fd/N returned a descriptor that did not inherit FD_RESOLVE_BENEATH or the Capsicum capability rights of descriptor N. A process in a jail that has received a directory file descriptor from another jail can use these techniques to escape the jail's filesystem root restriction.

Traduire en français

Produits concernés

FreeBSD
Freebsd freebsd

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.1 Élevée	nvd@nist.gov (NVD)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N`
3.1	7.1 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N`

Faiblesses (CWE)

CWE-273

Références

https://security.freebsd.org/advisories/FreeBSD-SA-26:66.jail.asc PatchVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories