CVE-2026-45257 BUMSRAKETE FreeBSD kTLS schg Bypass Exploit Preparation

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•4

Detects reconnaissance and exploit activity associated with the BUMSRAKETE exploit (CVE-2026-45257) targeting FreeBSD. The rule identifies system configuration checks of kernel parameters related to kTLS and mbuf external pages, as well as the execution of file permission manipulation commands often required to bypass immutable (schg) file flags during the exploitation process.