CVE-2026-45257 BUMSRAKETE FreeBSD kTLS-RX LPE Exploit Execution

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects the execution of the BUMSRAKETE exploit for CVE-2026-45257, which targets kTLS-RX page-cache corruption in FreeBSD to achieve local privilege escalation. The rule monitors for pre-exploitation sysctl enumeration of kernel memory management parameters and the subsequent spawning of privileged shells (su/sh) by the exploit process.