{"id":"CVE-2026-101303","revision":"2106cfdf26d245cfaaa89f93274ad74b","records":[{"revision":"2106cfdf26d245cfaaa89f93274ad74b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-101303","aliases":[],"title":"IPv6 UDP sendto(2) bypasses jail loopback restriction","description":"The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address.\n\nA process in a classic (non-VNET) jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail network isolation.","state":0,"publishedAt":"2026-10-15T06:58:55.833+00:00","modifiedAt":"2026-10-16T18:36:07.211+00:00","affected":[{"ecosystem":"Vendor product","name":"FreeBSD","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unknown\",\n                    \"modules\": [\n                        \"udp\"\n                    ],\n                    \"product\": \"FreeBSD\",\n                    \"vendor\": \"FreeBSD\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"release\",\n                            \"version\": \"15.1-RELEASE\",\n                            \"lessThan\": \"p4\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"release\",\n                            \"version\": \"15.0-RELEASE\",\n                            \"lessThan\": \"p14\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"release\",\n                            \"version\": \"14.5-RELEASE\",\n                            \"lessThan\": \"p1\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"release\",\n                            \"version\": \"14.4-RELEASE\",\n                            \"lessThan\": \"p10\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://security.freebsd.org/advisories/FreeBSD-SA-26:69.udp.asc"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-101303","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-101303","identifiers":["CVE-2026-101303"]},"retained":false,"historicalAffected":[]}],"coverage":[]}