A stack-based buffer overflow in the FreeBSD setcred(2) system call presents a critical risk of local privilege escalation for authenticated users.

This is a stack-based buffer overflow (CWE-121) within the setcred(2) system call. While the call is intended for privileged users, the flaw allows for memory corruption that can be triggered by an attacker with low-level local privileges.

The CVSS score of 7.8 underscores the danger of this vulnerability, which allows local users to bypass security boundaries. By corrupting the stack, an attacker can potentially execute arbitrary code with kernel-level privileges, resulting in full system compromise and loss of confidentiality, integrity, and availability.

Immediate Action: Update all affected FreeBSD installations to the latest patch release (15.0-RELEASE-p9, 14.4-RELEASE-p5, or 14.3-RELEASE-p14).

Proactive Monitoring: Monitor for suspicious processes executing system calls or attempting to manipulate credentials beyond their assigned capabilities.

Compensating Controls: Limit access to the system to authorized users only and implement strict principle-of-least-privilege configurations to mitigate the impact of a local account compromise.

Public Exploit Available: Yes — a proof-of-concept repository exists on GitHub.

The presence of a public proof-of-concept makes this vulnerability an immediate threat to any environment where local access is provided to users. Patching is required urgently to prevent attackers from leveraging the available PoC to gain administrative control over the underlying operating system.