As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed root user's ktrace(2) flags, or disable tracing outright. A jailed root user therefore cannot reliably trace unprivileged processes.
Fix
Patch, vendor advisory and mitigation references on NVD 1
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.1 · freebsdNVD modified 2026-10-27 12:10
Affected (CPE criteria) 16
cpe:2.3:o:freebsd:freebsd:15.0:-:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p10:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p11:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p2:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p3:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p4:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p5:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p6:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p7:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p8:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.0:p9:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.1:-:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.1:p1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.1:rc2:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:15.1:rc3-p1:*:*:*:*:*:*