CVE-2026-45257: LPE in FreeBSD via kTLS-RX

8 points by dgst


thomas0

The site seems over the top for this:

Is this remotely exploitable?

No, it requires a local TCP socket and sendfile on a file the attacker can read. That is to say: any local shell, any web hosting container, any jail with the default capability set. It is a local bug.