CVE-2026-101310: freebsd Buffer Over-read

Vulnerability summary

CVE-2026-101310 is a high (CVSS 7.0) Buffer Over-read vulnerability in freebsd. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.5% of scored vulnerabilities.

Timeline

1. 15-10-2026
   PublishedVulnerability first disclosed.
2. 16-10-2026
   Last modifiedVulnerability information updated.

Description

The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry caused an out-of-bounds read or write during DMA transfer processing. BDL fields were also subject to modification by the guest after validation. A malicious guest can crash the bhyve process or potentially execute arbitrary code in the host userspace context running the virtual machine, subject to bhyve's Capsicum sandbox.

• CWE-126Buffer Over-readThe product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.