UNKNOWN NVD

CVE-2026-101305

renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then

renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then escape the jail root via fchdir(2). This requires the directory to reside on a filesystem that is also reachable from the jail's root. A process in a jail that has received a directory file descriptor from another jail can use these techniques to escape the jail's filesystem root restriction.

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:66.jail.asc

Published: 2026-10-15 · Source: NVD · Feed updated: 2026-10-15

This unknown severity vulnerability was published on 2026-10-15 via NVD.

vulnfeed aggregates 13758 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.