← Fixed vulnerabilities
Fixed
Kernel stack disclosure in 32-bit compatibility support
FreeBSD-SA-26:48.compat32 · CVE-2026-49425
Our decision for FreeSense
FreeBSD corrected this on 2026-03-20, before the FreeBSD source pin of every FreeSense version.
- Advisory: corrected 2026-03-20
- FreeSense 1.0 pin: e004ff15f87e (2026-08-03)
- FreeSense 1.1 pin: a52c50b4b7c2 (2026-10-04)
- FreeSense 1.2 pin: a52c50b4b7c2 (2026-10-04)
Decided by rules, not yet reviewed. The status comes from the advisory's correction date and the build configuration. A maintainer has not looked at whether FreeSense is exposed in practice. How we triage
By FreeSense version
| Version | Status | FreeBSD pin |
|---|---|---|
| FreeSense 1.01.0.7 · frozen, no further fixes | FixedFreeBSD pin of 2026-08-03 | 2026-08-03e004ff15 |
| FreeSense 1.11.1.9 | FixedFreeBSD pin of 2026-10-04 | 2026-10-04a52c50b4 |
| FreeSense 1.21.2.0-DEVELOPMENT | FixedFreeBSD pin of 2026-10-04 | 2026-10-04a52c50b4 |
Workaround
No workaround is available.
What FreeBSD says
The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct.
Impact
An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information.
Excerpt from the FreeBSD advisory. Read the original for the full text and the fix.