#freebsd — Public Fediverse posts

A new pull request has been opened at https://github.com/freebsd/drm-kmod/pull/499 to include a #virtio driver in the #FreeBSD #DRM/#KMS graphics stack.

That is great news for all those who are using FreeBSD as a desktop system as a VM because this will finally allow using e.g. #Wayland or accelerated #X11.

I really enjoy projects with good documentation. A wonderful rabbithole. And of course nushell and rio-terminal are available on FreeBSD, and included in my upcoming Hyprland config 🥳
#freebsd #nushell
https://www.nushell.sh/book/

FreeBSD patched 8 vulnerabilities on August 25, 2026, mostly local privilege escalation flaws plus a ppp code execution bug. Update now.

#FreeBSD #CyberSecurity #CVE #PrivilegeEscalation #Infosec

https://securityonline.info/freebsd-kernel-vulnerabilities-august-2026/?utm_source=mastodon&utm_medium=jetpack_social

freebsd-update fetch install

#FreeBSD #PatchDay

Upcoming Advisories - TrendAI™ Zero Day Initiative™ (ZDI)

<https://www.zerodayinitiative.com/advisories/upcoming/> @thezdi

Fourteen for FreeBSD, forty-three for Linux …

#FreeBSD #AI #cybersecurity #security #ZDI

FreeBSD: kernel use-after-free via tty ioctls – CVE-2026-58093

https://www.cve.org/CVERecord?id=CVE-2026-58093

"The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session. An unprivileged local user can exploit this race condition to escalate privileges."

Credit: tsune of GMO Cybersecurity by Ierae, Inc. working with TrendAI Zero Day Initiative @thezdi

<https://ctftime.org/team/224122>

<https://gmo-cybersecurity.com/>

<https://nvd.nist.gov/vuln/detail/CVE-2026-58093>

<https://reviews.freebsd.org/D59126>, <https://github.com/freebsd/freebsd-src/commit/b207f754c7709212381eda8c91dbf080081ac5a1>

#FreeBSD #AI #cybersecurity #security #ZDI

The bear is friendly. Think of honey, if you can.

For anyone who wonders why tags included #FreeBSD, it's because – in addition to the write-up of CVE-2026-58083 and CVE-2026-58084 (July 2026) – I assume that Hazley Samsudin might also choose Blimpers for CVE-2026-58092 (August).

<https://www.cve.org/CVERecord?id=CVE-2026-58092>

<https://nvd.nist.gov/vuln/detail/CVE-2026-58092>

<https://security.freebsd.org/advisories/FreeBSD-SA-26:59.mac_do.asc>

<https://defcon.social/@charlesrocket/116714325230546417> @charlesrocket re: LLM shaming.

Wizards conjure up lists of all those dwelling within the realm. #Samba #FreeBSD #OpenSource https://cromwell-intl.com/open-source/samba-active-directory/deployment.html?s=mc

A lot was read, some was learned and some was just copied, because it was worthwhile. My Codeberg page with the FreeBSD 15 Base install has been updated already; blog and Hyperio to follow!
#freebsd
https://codeberg.org/thesaigoneer/pages/src/branch/main/FreeBSD%2015%20Base%20Install

Gladius, that previously crashed on Ghostbsd, now works perfectly with Vulkan that works correctly.

#bsd #ghostbsd #freebsd #pcgaming #w40k #gladius #videogame #videogames

https://security.freebsd.org/advisories/FreeBSD-SA-26:60.ppp.asc

Décio Brandão is amongst the credits, however their name is misrepresented as Décio Brandão

Noted on Kubuntu 26.04 in Microsoft Edge 152.0.4191.41, Firefox 154.0.1, NetSurf 3.11. No problem in lynx 2.9.2-2. I can't test some of the other installed browsers.

https://bokut.in/freebsd-patch-level-table/advisories/FreeBSD-SA-26:60.ppp.asc.html is bugged in lynx.

#FreeBSD #security

The Timer That Fired Too Soon — FreeBSD 15.1 Local Privilege Escalation · Blimpers

https://blimpers.dev/research/freebsd15-kqueue-cof-uaf/

– via <https://www.linkedin.com/posts/hazley-samsudin_about-a-week-ago-freebsd-released-the-security-ugcPost-7491435263303315456-W-qk/>

Credit: Hazley Samsudin, GovTech CSG

#FreeBSD #AI #security

https://blimpers.dev/

A group of interesting people with the chilly interest in AI and cybersecurity – doing CTFs in our free time, and some vulnerability research on the side.

#AI #cybersecurity #vulnerability #FreeBSD #Oracle #VirtualBox

I'd never expect to have that much fun configging a terminal. I mean, aside from a new fastfetch config that is 🤣 Both on FreeBSD, in my Hyprland config.
#freebsd #rioterminal
https://rioterm.com/

upgrade #freebsd ke security patch p3

Looks like this FreeBSD vuln is going to keep on giving for a while.

FreeBSD-SA-26:57.unix

[...]

III. Impact
An unprivileged local user can exploit this use-after-free to escalate privileges.

IV. Workaround
No workaround is available.

#FreeBSD #CVE_2026_58090

FreeBSD 15.0 // HWPMC // SA-26:56

Date: August 25, 2026
Name: FreeBSD-SA-26:56.hwpmc
Description: hwpmc fails to detach PMCs during exec credential transitions CVE-2026-58089
Link: https://www.freebsd.org/security/advisories/FreeBSD-SA-26:56.hwpmc.asc

#FreeBSD #Security #Update

FreeBSD 15.0 // UNIX // SA-26:57

Date: August 25, 2026
Name: FreeBSD-SA-26:57.unix
Description: Use-after-free in unix SOCK_STREAM message handling CVE-2026-58090
Link: https://www.freebsd.org/security/advisories/FreeBSD-SA-26:57.unix.asc

#FreeBSD #Security #Update