FatGid: FreeBSD 14.x kernel local privilege escalation

Post by cryo32 » Thu, May 21, 2026, 10:42 PM UTC

tptacek wrote: post #23

866-RON-0-FEZ wrote: post #19

Earlier quoted context omitted.

Maybe the researcher was wearing windshield-wiper spectacles when he discovered the vulnerability. I don't understand why you're being so defensive about this.

Because it's a tiresome, tropey, and ultimately invalid complaint. Look downthread at the person who said the FreeBSD commit log was better than this page, despite being inscrutable to security practitioners who don't work in the kernel and not saying a word about proven exploit vectors. These complaints aren't about what's better or worse for the user community; they're about people trying to put vulnerability resea…

Post by loeg » Fri, May 22, 2026, 1:59 AM UTC

HDBaseT wrote: post #42

loeg wrote: post #32

Earlier quoted context omitted.

PlayStation 4 was a fork of FreeBSD 9, and is immune to this bug introduced in 14. Sony also changes a LOT, I'm not sure anything dealing with unix credentials even exists in this fork. It's not clear how much FreeBSD is even used in PlayStation 5 (2020), but it would be based off 12 or earlier (also immune to this bug from 14) (13 was released in 2021).

What about PlayStation 3? Whilst all are "soft-moddable" via HEN, a large number of the Slim and Superslims are not compatible with full custom firmware. Recently a hardware based exploit 'badWDSD' released which allow CFW, although even still a small number of Superslims are not compatible.

Post by ksec » Fri, May 22, 2026, 11:58 AM UTC

djha-skin wrote: post #5

TrueNAS is on FreeBSD, as well as lots of network equipment. This does affect us more than we think as operators.