CVE-2026-45259

Name of the Vulnerable Software and Affected Versions FreeBSD (affected versions not specified)

Description The implementation of the kern sigqueue() function failed to include a capability mode check. This allows a process operating in Capsicum capability mode—a security framework that restricts process privileges—to use the sigqueue(2) system call to send signals to any process it would normally be able to signal under standard Unix permissions. Consequently, a compromised sandboxed process can bypass sandbox restrictions to interfere with other processes, such as by sending SIGKILL or SIGSTOP signals. This impact extends to any process running under the same user or any process on the system if the sandboxed process has superuser privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.