medium5.5
CVE-2026-49424
The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t.
Impact
The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t. It did not first zero the stack struct. An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Freebsd | Versions 14.3, 14.4, 15.0 |