CVE-2026-45257 BUMSRAKETE FreeBSD kTLS-RX LPE Exploit Execution

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•2

This rule detects various stages of exploitation associated with the CVE-2026-45257 'BUMSRAKETE' vulnerability, which targets FreeBSD kernels. It monitors for the execution of exploit binaries, compilation of source code related to the exploit, the presence of specific staging files in temporary directories, and the subsequent spawning of shells by the exploit process. It also identifies command-line arguments indicative of BUMSRAKETE activity.