A high-severity kernel race condition in FreeBSD 15.1-RELEASE allows local unprivileged users to achieve privilege escalation via use-after-free.

This vulnerability involves a race condition occurring during the kernel copy of knotes. An unprivileged local user can trigger a use-after-free in the kernel when a timer-based filter fires during a fork operation, which may lead to privilege escalation.

The ability for an unprivileged local user to escalate privileges poses a significant threat to system integrity and confidentiality. Given the CVSS score of 8.4, this vulnerability represents a high risk to multi-user environments where isolated access is critical, as it could allow an attacker to gain full administrative control over the affected FreeBSD system.

Immediate Action: Update the affected FreeBSD system to the patched version as defined in FreeBSD-SA-26:50/kqueue.patch.asc.

Proactive Monitoring: Monitor system logs for kernel panics or unusual process behavior that may indicate exploitation attempts.

Compensating Controls: Restrict local shell access to untrusted users to minimize the attack surface until the kernel patch is applied.

Public Exploit Available: No

System administrators should prioritize the application of the vendor-supplied patch to address this kernel-level flaw immediately. Given the potential for complete privilege escalation, failure to remediate this vulnerability leaves the system susceptible to total compromise by local actors.