CVE-2026-49425

Name of the Vulnerable Software and Affected Versions FreeBSD (affected versions not specified)

Description The compat32 kevent() handler in the Linuxulator compatibility layer fails to zero a stack-declared 32-bit struct when translating a 64-bit kevent struct. This use of an uninitialized variable allows an unprivileged user to observe small amounts of uninitialized kernel stack data, which may lead to the disclosure of sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.