CVE-2026-49413

Name of the Vulnerable Software and Affected Versions FreeBSD (affected versions not specified)

Description A privilege escalation flaw exists in the Linuxulator, a compatibility layer that allows Linux binaries to run on FreeBSD. A logic bug related to AT SECURE occurs during setuid execution ordering, where AT SECURE=0 is emitted in the auxiliary vector (auxv). This allows local users to use the LD PRELOAD environment variable to gain root privileges (euid=0).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.