CVE-2026-7270: Local privilege escalation via execve()

Published Apr 30, 2026

Updated

An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers.

The bug may be exploitable by an unprivileged user to obtain superuser privileges.

Affected Software

37 affected components

FreeBSD FreeBSD=13.5

FreeBSD FreeBSD=13.5-beta3

FreeBSD FreeBSD=13.5-p1

FreeBSD FreeBSD=13.5-p10

FreeBSD FreeBSD=13.5-p11

FreeBSD FreeBSD=13.5-p12

FreeBSD FreeBSD=13.5-p2

FreeBSD FreeBSD=13.5-p3

FreeBSD FreeBSD=13.5-p4

FreeBSD FreeBSD=13.5-p5

FreeBSD FreeBSD=13.5-p6

FreeBSD FreeBSD=13.5-p7

FreeBSD FreeBSD=13.5-p8

FreeBSD FreeBSD=13.5-p9

FreeBSD FreeBSD=14.3

FreeBSD FreeBSD=14.3-p1

FreeBSD FreeBSD=14.3-p10

FreeBSD FreeBSD=14.3-p11

FreeBSD FreeBSD=14.3-p2

FreeBSD FreeBSD=14.3-p3

FreeBSD FreeBSD=14.3-p4

FreeBSD FreeBSD=14.3-p5

FreeBSD FreeBSD=14.3-p6

FreeBSD FreeBSD=14.3-p7

FreeBSD FreeBSD=14.3-p8

FreeBSD FreeBSD=14.3-p9

FreeBSD FreeBSD=14.4

FreeBSD FreeBSD=14.4-p1

FreeBSD FreeBSD=14.4-p2

FreeBSD FreeBSD=14.4-rc1

FreeBSD FreeBSD=15.0

FreeBSD FreeBSD=15.0-p1

FreeBSD FreeBSD=15.0-p2

FreeBSD FreeBSD=15.0-p3

FreeBSD FreeBSD=15.0-p4

FreeBSD FreeBSD=15.0-p5

FreeBSD FreeBSD=15.0-p6

Event History

Apr 30, 2026

CVE Published

via MITRE·07:02 AM

Data Sourced

via MITRE·07:02 AM

DescriptionWeakness

Data Sourced

via NVD·07:16 AM

DescriptionSeverityWeaknessAffected Software

Feb 22, 58334

Event

via FIRST·07:25 PM

Frequently Asked Questions

What is the severity of CVE-2026-7270?

CVE-2026-7270 has a high severity level due to its potential for local privilege escalation.

How do I fix CVE-2026-7270?

To fix CVE-2026-7270, update your FreeBSD system to the latest patched version that addresses this vulnerability.

Who is affected by CVE-2026-7270?

CVE-2026-7270 affects FreeBSD versions 13.5 and 14.3 through 15.0, including various patch levels.

Can unprivileged users exploit CVE-2026-7270?

Yes, unprivileged users may exploit CVE-2026-7270 to gain superuser privileges on affected systems.

Is there a workaround for CVE-2026-7270?

There are no specific workarounds for CVE-2026-7270; applying the available security updates is the recommended approach.