PT-2026-21884 · Freebsd · Freebsd

Adam Crosser · Published 2026-02-24 · Updated 2026-03-09 · CVE-2026-3038

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD (affected versions not specified)

Description The rtsock msg buffer() function copies sockaddr structures into a sockaddr storage structure on the stack without proper validation of the source sockaddr length. This can lead to a 127-byte stack buffer overflow. The overflow overwrites the stack canary for the rtsock msg buffer() function, causing a kernel panic upon function return. An unprivileged user can crash the kernel by triggering this overflow. While the stack canary provides mitigation, other kernel bugs could potentially allow an attacker to bypass this protection, potentially leading to local privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

LPE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2026-03239

CVE-2026-3038

Affected Products

Freebsd

References · 12

• https://security.freebsd.org/advisories/FreeBSD-SA-26:05.route.asc · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03239 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-3038 · Security Note
• https://twitter.com/the_yellow_fall/status/2026929921537224897 · Twitter Post
• https://twitter.com/cyberbivash/status/2031021680705917250 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2031031209690558481 · Twitter Post
• https://t.me/CVEtracker/46904 · Telegram Post
• https://twitter.com/CVEnew/status/2031122532938506432 · Twitter Post
• https://twitter.com/vuldb/status/2031016555069505825 · Twitter Post
• https://twitter.com/UndercodeUpdate/status/2026478894354764175 · Twitter Post
• https://freebsd.org/security/advisories/FreeBSD-SA-26:05.route.asc · Note
• https://tenable.com/cve/CVE-2026-3038 · Note