HIGHCVSS v3.1 7.1Vulnerability

CVE-2026-101304

When fdescfs(4) was mounted in a jail with the "nodup" option, opening /dev/fd/N returned a descriptor that did not inherit FD_RESOLVE_BENEATH or the Capsicum capability rights of descriptor N. A process in a jail that has received a directory file descriptor from another jail can use these techniques to escape the jail's filesystem root restriction.

Properties

Severity
HIGH
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Cvss severity
HIGH
Cvss score
7.1
Epss score
0.00143
Retrieved at
2026-10-21T01:24:48+00:00
Last source
FIRST EPSS
Cvss version
3.1
Score
7.1
Cve id
CVE-2026-101304
Cvss vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
First seen by Signal
2026-10-18T13:39:03+00:00
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Published at
2026-10-15T07:17:57.550
Last modified
2026-10-20T17:17:27.510
Epss percentile
0.0321

Related Entities (30 · showing 21)

AFFECTS_PRODUCT (29 · showing 20)

→[Product]cpe:2.3:o:freebsd:freebsd:15.1:-:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.1:p1:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.1:p3:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.1:p2:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:14.4:-:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p10:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p5:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p13:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p7:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p4:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:14.4:p9:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p1:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p11:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:14.4:p6:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:14.4:p7:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:14.4:p3:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:-:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p12:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p8:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p2:*:*:*:*:*:*

HAS_WEAKNESS (1)

→[Weakness]Improper Check for Dropped Privileges

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-101304 (CVSS v3.1 7.1) — Ninja Signal Threat Intelligence | Ninja Signal