FreeBSD fifteen point one RC one arrives with AI patches and fixed date for June

Published on May 25, 2026 | Translated from Spanish

FreeBSD 15.1-RC1 is now available, and it brings six critical security advisories (from SA-26:19 to SA-26:24) discovered with the help of artificial intelligence tools. The final stable release is scheduled for June. Among the fixed bugs are a use-after-free in the kernel via file descriptor calls, a missing validation in ptrace that allowed privilege escalation to root, and a remote code execution vulnerability in the installer when scanning WiFi networks.

FreeBSD 15.1-RC1 kernel debugging session, glowing AI analysis tools scanning memory blocks for use-after-free exploit in file descriptor calls, green terminal lines highlighting ptrace validation bypass and root escalation path, WiFi scanning module revealing remote code execution vulnerability, multiple security advisories SA-26 markers floating as holographic tags, cinematic technical illustration, dark server room backdrop with blue LED server racks, terminal code reflections on polished metal surfaces, glowing red threat indicators over kernel structures, photorealistic engineering visualization, dramatic low-angle light

Deep patches and an AI that sniffs bugs 🐛

The most delicate fix is the use-after-free in the file descriptor subsystem, which could be exploited locally to corrupt memory. The ptrace flaw, on the other hand, allowed an unprivileged process to gain full system access. In the bsdinstall installer, a malicious scan of WiFi access points could trigger remote code execution during installation. Mitigations are available in the official patches and in the releng/15.1 branch.

Installer WiFi: now only for hungry hackers 🍔

Having an operating system installer allow remote code execution just by scanning WiFi networks is a classic nobody asked for. It's like asking for your router password when you load the browser. Good thing the AI found the hole before some smart aleck set up an access point called FreeBSD_Update_Fake. Now, we wait until June to see if the installer stops being a minefield.