FreeBSD 14.4-RELEASE Errata
Abstract
This document lists errata items for FreeBSD 14.4-RELEASE, containing significant information discovered after the release or too late in the release cycle to be otherwise included in the release documentation. This information includes security advisories, as well as news relating to the software or documentation that could affect its operation or usability. An up-to-date version of this document should always be consulted before installing this version of FreeBSD.
This errata document for FreeBSD 14.4-RELEASE will be maintained until the release of FreeBSD 14.5-RELEASE.
Table of Contents
Introduction
This errata document contains "late-breaking news" about FreeBSD 14.4-RELEASE. Before installing this version, it is important to consult this document to learn about any post-release discoveries or problems that may already have been found and fixed.
Any version of this errata document actually distributed with the release (for example, on a CDROM distribution) will be out of date by definition, but other copies are kept updated on the Internet and should be consulted as the "current errata" for this release. These other copies of the errata are located at https://www.bueelt.ip-ddns.com/releases/, plus any sites which keep up-to-date mirrors of this location.
Source and binary snapshots of FreeBSD 14-STABLE also contain up-to-date copies of this document (as of the time of the snapshot).
For a list of all FreeBSD CERT security advisories, see https://www.bueelt.ip-ddns.com/security/.
Security Advisories
| Advisory | Date | Topic |
|---|---|---|
26 March 2026 |
TCP: remotely exploitable DoS vector (mbuf leak) |
|
26 March 2026 |
Remote code execution via RPCSEC_GSS packet validation |
|
26 March 2026 |
pf silently ignores certain rules |
|
21 April 2026 |
Kernel use-after-free bug in the TIOCNOTTY handler |
|
21 April 2026 |
Missing large page handling in pmap_pkru_update_range() |
|
29 April 2026 |
Remote code execution via malicious DHCP options |
|
29 April 2026 |
Local privilege escalation via execve() |
|
29 April 2026 |
pf can overflow the stack parsing crafted SCTP packets |
|
29 April 2026 |
Remotely triggerable out-of-bounds heap write in dhclient |
|
29 April 2026 |
Stack overflow via select() file descriptor set overflow |
|
29 April 2026 |
Heap overflow in libnv |
|
20 May 2026 |
Stack buffer overflow via setcred(2) |
|
20 May 2026 |
Kernel use-after-free via file descriptor syscalls |
|
20 May 2026 |
Heap overflow in FUSE_LISTXATTR |
|
20 May 2026 |
Missing validation in ptrace(PT_SC_REMOTE) |
|
20 May 2026 |
select(2) file descriptor set overflow causes stack overflow |
|
20 May 2026 |
Remote code execution via installer Wi-Fi access point scans |
|
20 May 2026 |
Incorrect libcap_net limitation list manipulation |
|
9 June 2026 |
Missing permission check in thr_kill2(2) |
|
9 June 2026 |
Arbitrary file overwrite via the KTLS receive path |
|
9 June 2026 |
Multiple vulnerabilities in the sound(4) mmap path |
|
9 June 2026 |
sigqueue(2) missing capability mode restriction |
|
9 June 2026 |
Use-after-free bug in the IPV6_MSFILTER socket option handler |
|
9 June 2026 |
Flaw in Linuxulator execution of setugid binaries |
|
9 June 2026 |
Arm CPU errata may bypass page table permission changes |
|
9 June 2026 |
ASLR bypass for setuid executables via procctl(2) |
|
9 June 2026 |
Multiple vulnerabilities in unbound |
|
9 June 2026 |
Integer overflow in vt(4) CONS_HISTORY ioctl |
|
9 June 2026 |
Multiple vulnerabilities in OpenSSL |
|
9 June 2026 |
Insufficient response validation in the ldns stub resolver |
Errata Notices
| Errata | Date | Topic |
|---|---|---|
21 April 2026 |
The page fault handler fails to zero memory |
|
21 April 2026 |
Periodic timerfd(2) timers may produce incorrect results |
|
29 April 2026 |
Timezone database information update |
|
29 April 2026 |
TLB invalidation bug on AMD systems with INVLPGB |
|
1 May 2026 |
dhclient(8) lease validation is too strict |
|
1 May 2026 |
Source inconsistency between freebsd-update, EN/SAs, and git |
|
20 May 2026 |
freebsd-update attempts to merge a generated file |
|
9 June 2026 |
Update OpenSSL to 3.0.20 and 3.5.6 |
Open Issues
-
freebsd-update(8) commands such as
fetchorinstallmay hang when pkg(8) is not bootstrapped on the system.
Workaround: run pkg(8) to install the package management tool, then reuse freebsd-update(8).
State: open - https://bugs.freebsd.org/293516 -
loader_lua(8) A regression in the boot loader scripts causes the wrong kernel to be selected if /boot/kernel is a symlink.
Workaround: Disable automatic kernel detection by adding kernels_autodetect="NO" to /boot/loader.conf.
State: fixed in main - https://bugs.freebsd.org/293654
Late-Breaking News
No late-breaking news.
Last modified on: June 10, 2026 by Philip Paeps