CVE-2026-5398: Freebsd

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

The implementation of TIOCNOTTY failed to clear a back-pointer from the structure representing the controlling terminal to the calling process' session. If the invoking process then exits, the terminal structure may end up containing a pointer to freed memory. A malicious process can abuse the dangling pointer to grant itself root privileges.

Affected products

• Freebsd Freebsd: version 13.5 only; version 14.3 only; version 14.4 only; version 15.0 only

Published 2026-04-22. Last modified 2026-06-17.