medium5.5
CVE-2026-49425
The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit struct.
Impact
The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Freebsd | Versions 14.3, 14.4, 15.0 |