CVE-2026-49424

Name of the Vulnerable Software and Affected Versions FreeBSD (affected versions not specified)

Description The Linux compatibility layer implementation of the waitid() system call fails to zero a stack-declared Linux siginfo t structure when translating it from a FreeBSD siginfo t structure. This allows an unprivileged user to observe 104 bytes of uninitialized kernel stack data, which may lead to the disclosure of sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.