Priority HIGH 69
The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous and safe to modify.
Vulnerabilities
2 records
TI-2026-33063 CVE-2026-45256 · GHSA-hvc9-hvw8-q2fx
Missing permission check in thr_kill2(2)
Priority LOW 24
When used to deliver a signal to a specific thread, thr_kill2(2) called p_cansignal() to determine whether the operation was permitted but did not check the result before delivering the signal.