CVE-2019-5601: In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and...

Security readout for executives and security teams

This FreeBSD flaw can cause tiny fragments of kernel stack memory, up to three bytes, to be written into directory padding on disk. The direct business risk is information exposure from affected FreeBSD systems or their disk images, not a confirmed takeover path in the provided sources. Exposure is limited to FreeBSD systems running affected 11.2 or 12.0 versions with FFS/UFS activity. Disk contents, snapshots, or backups made before patching may contain leaked bytes. The source bundle does not identify affected appliances, managed services, or downstream products. Treat this as a scheduled remediation item unless affected systems store highly sensitive data or disk images are broadly accessible. No active exploitation is cited, but patching prevents continued leakage and reduces uncertainty around historical filesystem artifacts. Mitigation focus: Upgrade FreeBSD 12.0 systems to 12.0-RELEASE-p7 or later vendor-fixed builds.; Upgrade FreeBSD 11.2 systems to 11.2-RELEASE-p11 or later vendor-fixed builds.; For STABLE branches, ensure 12.0-STABLE includes r347474 and 11.2-STABLE includes r347475..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.