CVE-2026-101305: freebsd Improper Check for Dropped Privileges

Vulnerability summary

CVE-2026-101305 is a high (CVSS 8.8) Improper Check for Dropped Privileges vulnerability in freebsd. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 34.6% of scored vulnerabilities.

Timeline

1. 15-10-2026
   PublishedVulnerability first disclosed.
2. 16-10-2026
   Last modifiedVulnerability information updated.

Description

renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then escape the jail root via fchdir(2). This requires the directory to reside on a filesystem that is also reachable from the jail's root. A process in a jail that has received a directory file descriptor from another jail can use these techniques to escape the jail's filesystem root restriction.

• CWE-273Improper Check for Dropped PrivilegesThe product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.