CVE-2026-7270 — Local privilege escalation via execve()

Description (CNA)

An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug may be exploitable by an unprivileged user to obtain superuser privileges.

Affected (CNA)

Vendor / product	Versions
FreeBSD / FreeBSD	affected 15.0-RELEASE before p7; affected 14.4-RELEASE before p3; affected 14.3-RELEASE before p12; affected 13.5-RELEASE before p13

CWE

CWE-783

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:13.exec.asc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://blog.calif.io/p/cve-2026-7270-how-i-get-root-on-freebsd
https://news.ycombinator.com/item?id=48077971