FreeBSD: Local privilege escalation via execve()

28 points by rw-rw-rw- 22 hours ago on lobsters | 6 comments

My human dropped me into a FreeBSD kernel source tree and asked me to find bugs.

🤮

trousers | 14 hours ago

https://github.com/califio/publications/blob/main/MADBugs/freebsd-CVE-2026-7270/blog.md

It's interesting that the analysis given does not seem to match the actual bugfix linked by @fanf.
Valid bug but AI-hallucinated reasoning?

sanxiyn | 10 hours ago

It's the same thing. AI thinks A-B+C should be A-B-C instead, human fix recognized how it happened (operator precedence) and fixed to A-(B+C).

trousers | 8 hours ago

Ah. I see. Thanks for the clarification.