Tag
Intel highlights how its Control-Flow Enforcement Technology (CET) blocks exploitation of a 17-year-old remote code execution vulnerability in FreeBSD that was autonomously discovered and exploited by Anthropic's AI system Mythos.
FreeBSD froze its ports repository after a maintainer accidentally committed a 150MB Linux Copilot binary, breaking the GitHub mirror and raising licensing concerns.
FreeBSD 16 has removed the last GNU GPL licensed code from its base system, retiring the dialog utility and the GNU subtree. This marks a milestone in FreeBSD's move to a fully permissively-licensed base system.
The article describes the implementation of native inotify support in FreeBSD, solving file monitoring issues with the existing userspace library by moving inotify into the kernel for better performance and correctness.
The author describes how they bootstrapped the GNU D Compiler (GDC) on FreeBSD using the DMD compiler and a small wrapper program, challenging GCC's claim that GDC must be built with GDC.
This article explores using large language models to assist in writing exploits for FreeBSD kernel vulnerabilities, detailing two exploit chains that achieve full jail escape.
This article describes how researchers at Praetorian used Claude Opus (via Claude Code) to discover and exploit vulnerabilities in the FreeBSD kernel, including a stack overflow (CVE-2026-3038) that allows escape from FreeBSD jails. Part one focuses on methodology for finding bugs.
An article explaining why FreeBSD appears to use a lot of RAM, attributing it to disk caching and virtual memory management, similar to Linux's 'ate my RAM' phenomenon.
An article investigating platform support for GNU extensions to Basic Regular Expressions (BRE), specifically the `\+` operator, and finding it works on FreeBSD, macOS, and musl-based distributions like Chimera Linux.
The author shares their positive experience with FreeBSD 15 on a laptop, highlighting improvements like pkgbase, LinuxKPI drivers, and the Laptop Support Project, and provides a step-by-step guide to install and configure KDE Plasma 6 on a ThinkPad X1 Carbon.
A critical local privilege escalation vulnerability in FreeBSD (CVE-2026-45257) allows an unprivileged user to write arbitrary data into the page cache of any readable file, bypassing file permissions and flags, leading to full root compromise. The bug affects default installations of FreeBSD 13.0 and later via unsafe composition of sendfile, KTLS, and in-kernel AES-GCM decryption.
A conference talk introducing FreeBSD, its differences from Linux, and why it matters as an alternative in server and desktop environments.
An AI-assisted security audit of FreeBSD uncovered 15 kernel vulnerabilities, including privilege escalations and a VM escape, and details the collaborative process of reporting and patching bugs with the FreeBSD team.
FreeBSD Foundation Executive Director Deb Goodkin successfully daily drives FreeBSD on a Framework Laptop, overcoming long-standing hardware support issues.
The author migrated their blog from a 10-year-old Ubuntu 16.04 VPS to a more cost-effective FreeBSD VPS, detailing the motivation, setup, and introduction to FreeBSD Jails with Bastille.
This article describes how to set up a private FreeBSD package repository secured with mutual TLS, including creating a custom certificate authority and configuring nginx to require client certificates.
A kernel stack buffer overflow in FreeBSD 14.x's setcred(2) system call allows any unprivileged local user to escalate privileges to root, even with SMAP/SMEP enabled. The bug is not yet fixed in stable branches.
A review of the early version of Sylve, an open-source web-based administration tool for FreeBSD that simplifies managing jails, virtual machines, and ZFS datasets.
The FreeBSD Project unveiled a new design for its official website, highlighting the operating system's features like ZFS, virtualization, jails, networking, documentation, and community.
An open-source terminal tool called witr, developed by an Indian independent developer, explains why a process is running, traces its origin from kernel to systemd, and includes an interactive TUI dashboard. It gained 15,400+ GitHub stars in less than five months.