execve_block(): a mechanism for mutual exclusion with execve() on the process

(cherry picked from commit e1a84b7708c2514769625c2af6c5034694013b6a)
(cherry picked from commit a80e40ce9ee0a0641927730a193ff1f5641e71b6)

execve_block_pass(9): a helper to wait for the execblock to pass

(cherry picked from commit 450fe67d19eb2ea8e27109214ff21064fdcf808c)
(cherry picked from commit cbd58477285888b1b7ff21bdd0bc039f7ffad4ef)

proc: Allow to make proc_rwmem() operate on a consistent address space

(cherry picked from commit e1b0d051bbf7e4e730470cbd6622f71a639834c3)
(cherry picked from commit be6e5131066753dc23f8e9f223acc023b7618b63)

kern_proc.c: ensure stability of the vmspace we read the strings from

(cherry picked from commit a22c044cce41864a32af6b8281a3c416a2664d7f)
(cherry picked from commit 3748c2e257046056b969a5d47231695798198f4d)

kern_proc.c: ensure stability of the vmspace for sysctl kern.proc.vmmap

(cherry picked from commit 5fe6e08d2db56b530f0df2903ef24cfabab7b8ea)
(cherry picked from commit 20ed389b365030b868298d7ab4e8a01270c06c9f)

kern_proc.c: ensure stability of the vmspace for sysctl kern.proc.vm_layout

(cherry picked from commit 31fa677e4af00b795bf671847b4dc72960c90f14)
(cherry picked from commit eb03358c407d6f3c073320bdc26a5e4ceb923ca1)

kern_proc.c: make kern.proc.osrel atomic

(cherry picked from commit 80626f34ee985671bb8c60ee986b89587b7a1511)
(cherry picked from commit 5e633db3f8e126578c097c9649ba3be552664c6a)

kern_proc.c: disallow execve around sysctl kern.proc.kstacks

(cherry picked from commit 8b5abd9027b8b1f6290c756730ee3adebed007f4)
(cherry picked from commit 60d8df61846fc1f5f7e2a400d2b0237c9f1a6be8)

kern_proc.c: disallow execve around sysctl kern.proc.rlimit

(cherry picked from commit 5a91fa5a7656c99e527fe7e6f6bf6bd9e85ab589)
(cherry picked from commit 24d8b3364405e5c32618c6930d4fdd8bc543a08f)

kern_event: block the target process from execing for sysctl kern.proc.kqueue

(cherry picked from commit 79b384bd8fdff4869ce4799edb0342ff5c25b6fa)
(cherry picked from commit d172933cf69fb4dc58e07261653481a33cdf1da0)

kern_resource.c: disallow execve around sysctl kern.proc.rlimitusage

(cherry picked from commit 836749817036b90b60af0584fa21f2d9dbd60ff7)
(cherry picked from commit 035f66ff2924808f534df9065388aabf66e77266)

kern_procctl(PROC_WX_MAPPINGS_PERMIT): ensure stability of the target vmspace

(cherry picked from commit 6a572920f251ac8ac6a80a55d4d039736ea7dd65)
(cherry picked from commit d80a7fd6e6df65b4d85e6977557c3fbe8d9ff02e)

linux_prlimit(): block execve for the target

(cherry picked from commit e41c28e67fac9cd22a85b160c5c9d0477ed03600)
(cherry picked from commit e9002239571fb1502505ff85061934ef0ebd2e1e)

pfs_readdir(): block the target process from execing

(cherry picked from commit 4c0a0909f928baac982b7de4bfa5b5ca7de5291a)
(cherry picked from commit 1744ce4b052d4aea94c1c3b87fefabd0952e6082)

pseudofs: ensure that the target process vmspace is stable for VOP_READ/WRITE

(cherry picked from commit a4993bac41350e85bc9affb862d2974a1a09bb5e)
(cherry picked from commit 277f612073d0b086604448814867cadaacad4ca8)

procfs, linprocfs: ensure target process vmspace stability

(cherry picked from commit 5db31f1b47b586a5091eb41fc957236f28b78dba)
(cherry picked from commit 78981848b85fdd826eb830dfdd6d92c14b0f8bb3)

sys_set*id(9): wait for the execblocks to pass

(cherry picked from commit d0384f50dad25d3358d76f7556969ea1d515ba68)
(cherry picked from commit e0492444761b638ff072222d39ba5d6088a63370)

kern_exec.c: explicitly include sys/limits.h for UINT_MAX

(cherry picked from commit f5fce0bcc370a9700249e64901eabf2e0be4ecb0)
(cherry picked from commit 42d8b0bf7a5a074c7035585a06dd44aed1b2cbdd)

Approved by:	so
Security:	FreeBSD-SA-26:39.execve
Security:	CVE-2026-49415

0 files changed, 0 insertions, 0 deletions