CVE-2026-49414
The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen. An unprivileged local user can disable ASLR for a setuid PIE binary by calling procctl(2) before execve(2). This makes exploitation of any separate memory corruption vulnerability in that binary significantly easier.
Scoring
- CVSS base score
- 0
- EPSS probability
- 0.15%
- CWE
- CWE-179
- Published
- 2026-06-27
- Last modified
- 2026-06-27
Affected products
- FreeBSD FreeBSD
- FreeBSD FreeBSD
- FreeBSD FreeBSD
Weakness type
Related vulnerabilities
- CVE-2026-3832 — Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
- CVE-2025-4759 — Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order:...
- CVE-2024-41686 — Password Policy Bypass Vulnerability
- CVE-2022-1271 — An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied...