Privilege escalation in Freebsd
CVE-2025-15576
If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the two jail root directories is an ancestor of the other, jailed processes may nonetheless be able to access a shared directory via a nullfs…
Vulnerability class: Privilege Escalation
EPSS: 0.000 (6.7th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 14.3-RELEASE, 13.5-RELEASE
Weakness classification (CWE)
References
- security.freebsd.org/advisories/FreeBSD-SA-26:04.jail.asc (vendor-advisory)