CVE-2026-49414: ASLR bypass for setuid executables via procctl(2)
The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen.
An unprivileged local user can disable ASLR for a setuid PIE binary by calling procctl(2) before execve(2). This makes exploitation of any separate memory corruption vulnerability in that binary significantly easier.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-49414?
CVE-2026-49414 has a high severity rating of 7.8 according to the CVSS 3.1 metrics.
How do I fix CVE-2026-49414?
To fix CVE-2026-49414, update your FreeBSD system to include the latest security patches that address the ASLR bypass issue.
What software is affected by CVE-2026-49414?
CVE-2026-49414 affects FreeBSD operating systems that utilize the procctl(2) function.
What are the potential impacts of CVE-2026-49414?
The potential impact of CVE-2026-49414 allows an unprivileged local user to bypass ASLR protections and execute arbitrary code.
When was CVE-2026-49414 published?
CVE-2026-49414 was published on June 27, 2026.