Threats affecting pkg:deb/freebsd/freebsd-kernel

CVE-2026-49423 is a vulnerability in FreeBSD's kernel TLS implementation where uninitialized iovec array entries can be read during HMAC computation. This occurs due to improper handling of mbufs containing only TLS header bytes in ktls_ocf_tls_cbc_decrypt(). A remote TLS peer can trigger a kernel panic by controlling TCP segmentation to cause this condition.

CVE-2026-49421 is a vulnerability in FreeBSD's kernel unlinkat(2) and funlinkat(2) functions where the AT_RESOLVE_BENEATH flag is validated but not passed to the underlying path lookup. This causes the flag to be silently dropped, allowing path resolution to escape the intended directory containment. As a result, a process relying on this flag for confinement may delete files outside the targeted directory tree.