CVE-2026-101303

The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a…

Risk score: 56/100
CVSS: 7.5 v3.1
Exploit chance (30 days): 0.4%
Published: 15 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A process in a classic (non-VNET) jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail network isolation.
Affected: Freebsd
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 7.5 high
Remotely exploitable without logging in

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:69.udp.asc

Original description

The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A process in a classic (non-VNET) jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail network isolation.

Last activity 15 Oct 2026. Patch Forecast updates every hour.