FreeBSD Weekly Review: July 14–20, 2026

GPL-Free: FreeBSD 16 Removes Last GPL-Licensed Code from Base System

Perhaps the most significant news of the week: FreeBSD’s base system is now entirely free of GPL-licensed software. The last remaining GPL component was dialog, which had already been replaced by the BSD-licensed bsddialog in the installer over four years ago. The dpv utility was the last consumer of dialog, but hadn’t been built in over two years. With the removal of dialogdpvlibdpv, and libfigpar, the entire gnu/ subdirectory has been removed from the source tree — a directory that had persisted for decades.

For end users, nothing changes in practice since the affected components were either already replaced or no longer being built. Symbolically, however, this is a milestone: it closes one of the longest-running technical transitions in FreeBSD history. The Ports Collection still contains thousands of GPL-licensed programs — this change affects only the base system.

Desktop Installer: NVIDIA Driver Handling and Licensing Questions

Alfonso Siciliano, the driving force behind the KDE desktop installation option in the FreeBSD installer, published an update. After automatic GPU detection for Intel and AMD hardware was integrated in May, the focus is now on NVIDIA support. Automatic detection of the appropriate NVIDIA driver based on supported chipsets works technically — but automatic installation is currently blocked by unresolved NVIDIA licensing terms. Instead, users with NVIDIA GPUs will receive a manual driver selection menu. The desktop installation mode is targeted for FreeBSD 15.2 (planned for December 2026).

AMD ROCm on FreeBSD: Intern Ports Compute Stack

At the June FreeBSD Developer Summit, Sourojeet Adhikari, a FreeBSD Foundation intern, presented his work porting AMD’s ROCm compute stack to FreeBSD. FreeBSD already uses the AMDGPU DRM kernel driver (ported from the Linux kernel), but until now there has been no ROCm support for GPU compute. The initial goal is to run a simple vector addition with ROCm on FreeBSD — the full ROCm/HIP/OpenCL stack is too ambitious for a single internship period. If successful, this could provide a better alternative for GPU compute on FreeBSD than the unofficial CUDA support via Linux emulation or Podman containers.

NextBSD Returns: FreeBSD with Darwin Components

Joe Maloney has revived NextBSD as NextBSD-redux — a project combining FreeBSD with components from Apple’s open-source Darwin stack. The plan: keep the FreeBSD kernel but use Darwin services like launchd in the userland. Maloney is also using Claude Code (Anthropic’s AI assistant) for research, design, and code generation, while he personally reviews all changes and leads the project. A graphical desktop is not yet available; the long-term goal is to integrate the homegrown Gershwin desktop environment (based on GNUstep and Xfce). The project shares code with ravynOS and helloSystem but follows its own approach.

Security: Record Number of Advisories in June

Richard Bejtlich (Tao Security) reports that FreeBSD set a new project record with 25 security advisories in June 2026 — the previous record was 18 from January 2001. The driving force is increasing use of AI-powered vulnerability discovery tools: at least 9 of the June vulnerabilities were found with AI assistance. The Alpha-Omega project funds FreeBSD Security Team members on retainer to find and fix vulnerabilities, using AI models for discovery while patches are crafted manually.

The advisories published in late June affect critical components: – OpenZFS (CVE-2026-49429/49430): Kernel heap overflows via integer truncation in buffer sizes – libalias/RTSP (CVE-2026-49420): Buffer overflow enabling potential remote code execution on NAT gateways – TCP RACK (CVE-2026-49422): Use-after-free in the TCP stack – POSIX shared memory: Kernel memory freeing error with sendfile – KTLS: Denial of service via uninitialized memory access – compat32: Kernel stack disclosure in 32-bit compatibility mode – Linux compatibility layer: Kernel stack disclosure – iconv: Multiple vulnerabilities

Additionally, stack-protector-strong support (D56870) has been MFC’d to the stable/14 branch — an important hardening feature now enabled by default in the kernel.

Enterprise Survey: High Satisfaction

The FreeBSD Enterprise Working Group (EWG) published results from its enterprise user survey. The Net Promoter Score (NPS) comes in at 51.6 — in the technology sector, an NPS above 50 is considered excellent. 86% of respondents report that FreeBSD’s enterprise usability has improved (52%) or remained stable (34%) over the past three years. Key improvement drivers: bhyve, Jails management, Zero Trust, Reproducible Builds, and SBOMs. Biggest gaps: cloud-native support, third-party enterprise app support, and long-term support.

Laptop Project: June Update

The FreeBSD Foundation published its Laptop Project update for June. Key highlights: – Linux DRM 6.13: Graphics driver porting is complete and submitted for review. This is the first step toward DRM 6.18 (current LTS version). – Heterogeneous scheduling: Detailed ULE scheduler analysis performed; bug fixes submitted. An Intel Feedback Interface driver and HMP framework are in review. – S0ix/Suspend: Progress on D-state management for the AMD Framework Laptop; NVMe resume issues under investigation. – Hibernate (S4): A talk at the Developer Summit covered the current state of hibernate implementation. – Wi-Fi 6: Three drivers available (iwlwifi, rtw89, mt76); net80211 stack extensions still needed. – Perfetto: FreeBSD porting complete, pending review. – RFKILL/Keyboard: New driver for HID wireless radio control buttons (airplane mode toggle) added.

FreeBSD 15.2: Release Schedule Published

The official release schedule for FreeBSD 15.2 was published on July 15: – October 23, 2026: Code slush begins – November 6, 2026: releng/15.2 branch created + BETA1 – December 4, 2026: RELEASE builds begin – December 8, 2026: Release announcement – End-of-life: 15.1 on March 31, 2027; 15.2 on September 30, 2027

Notable Kernel Commits This Week

A selection of noteworthy commits in the FreeBSD source tree: – pfctl: Fix incorrect errno checks(kprovost) — Functions return error values but don’t set errno. – Revert “pkg: Add -j and -r options”(kevans91) — The options were reverted. – amd64 efirt: Register all runtime regions as fictitious(kostikbel) — Important for virtualization. – exterrctl(2): Add kern_exterrctl (brooksdavis) — CHERI upstreaming work, sponsored by DARPA. – ptrace(2): PTSETSC_RET request (kostikbel) — New ptrace functionality, sponsored by the FreeBSD Foundation. – malloc: Refactor redzone and KASAN handling(D58272) — Overhaul of memory debugging infrastructure.

FreeBSD Weekly Review: July 6–12, 2026

Date: July 13, 2026
Period: Monday, July 6 – Sunday, July 12, 2026

Security: 13 Advisories Released June 30

The biggest security news of the past two weeks landed on June 30, when FreeBSD published 13 security advisories (SA-26:37 through SA-26:49) addressing multiple critical vulnerabilities. Key highlights:

  • SA-26:40.zfs – OpenZFS Vulnerabilities (CVE-2026-49429, CVE-2026-49430): Input controls truncate 64-bit buffer sizes to 32-bit integers during memory allocation but use the original 64-bit size for memory writes. This size mismatch triggers kernel heap overflows. Systems using ZFS delegation features are at highest risk.
  • SA-26:41.libalias – Buffer Overflow in RTSP Handler (CVE-2026-49420): The libalias RTSP handler writes rewritten packets into a fixed-length stack buffer without checking whether the data actually fits. A remote attacker could use crafted RTSP traffic to take over a NAT gateway.
  • SA-26:43.tcp – Use-After-Free in TCP RACK Stack (CVE-2026-49422): The option handler drops a connection lock to copy user data from userspace, then reacquires it but fails to reload a stale pointer. Rapidly switching stacks during this window leaves a dangling memory reference.
  • SA-26:44.posixshm – POSIX Largepage Object Vulnerabilities: The system frees underlying memory pages when sendfileis used with a specific flag, while active mappings still reference the freed memory. Local attackers can access freed kernel memory.
  • SA-26:46.ktls – Remote DOS via Uninitialized Memory in KTLS Receive: Another KTLS vulnerability (following CVE-2026-45257, which enabled local root access). The receive path accesses uninitialized memory, which can cause a crash.
  • SA-26:48.compat32 – Heap Disclosure in compat32 kevent() Handler: The 32-bit compatibility kevent handler can expose uninitialized kernel memory to user processes.
  • SA-26:49.iconv – Multiple Vulnerabilities in iconv(3)

All advisories affect FreeBSD 14.x and 15.x. Administrators should update their systems promptly. Systems not loading specific modules are partially unaffected; workarounds include disabling libalias, unloading the TCP RACK module, and restricting unprivileged ZFS access.

In the Source Tree: Developer Commits This Week

On the main branch (FreeBSD 16-CURRENT), several notable commits landed:

  • pf: revert netlink commands back to enum (Gleb Smirnoff): The pf netlink interface was refactored; commands were changed from macros back to an enum format for better maintainability.
  • libc/resolv: Refactor the option parser (Dag-Erling Smørgrav): The resolver option parser was overhauled, dead code removed, and style cleaned up.
  • libsysdecode: Teach mktables to handle enums (Dag-Erling Smørgrav): The table generation tool can now process enum values.
  • inotify.2: Fix formatting and lint (Mark Johnston): The inotify manpage received formatting fixes.
  • pdfork.2: grammar (Konstantin Belousov): A small but clean documentation improvement.
  • D56976: Fix heap disclosure in compat7 kern.proc.filedesc sysctl (emaste): A Phabricator review closing a memory leak bug in compatibility code.

In the ports tree: – www/deno: Improve port (VVD, delphij): The Deno port received dependency fixes, PREFIX/LOCALBASE cleanup, and three patch correctness bugs were fixed.

Blog Posts and Community Contributions

“Moving to FreeBSD from Linux” (Kuon, July 2)

A long-time Mac OS and later Linux user (10 years of Arch Linux with Sway/Wayland) describes their switch to FreeBSD as a daily driver. After a Linux kernel update broke their keyboard, they installed FreeBSD and have been happy for 6 months. Missing pieces: OBS browser source and AnyDesk/RustDesk (workaround: VM). Their verdict: “It works.” and the community has been very welcoming.

Link

“Why FreeBSD Appears to Eat Your RAM (and Why It Doesn’t Matter)” (SourceFeed, July 4)

An excellent technical deep-dive into FreeBSD memory management. It explains why btop and fastfetch report wildly different memory usage on the same system (btop treats wired memory as “used,” fastfetch counts inactive+cache as “free”). The article covers page queues (Active, Inactive, Laundry, Wired, Free) and ZFS ARC — and why nearly free memory on a healthy FreeBSD system trends toward zero (by design).

Link

“Upgrading FreeBSD 15.0 to 15.1: The Official Paths” (Larvitz Blog)

A detailed guide for upgrading from 15.0-RELEASE to 15.1-RELEASE via both official paths: freebsd-update (distribution-set) and pkg (packaged-base). Particularly useful: the pkg which /usr/bin/uname distinction, the boot-loader update sequence, and the note about the June 30 errata. Updated on July 2 with the correct boot-loader procedure.

Link

“GitLab on FreeBSD” (Vuink, July 9)

A guide to installing and setting up a GitLab server on FreeBSD. Compares GitLab with Gitea as on-premises alternatives to GitHub. Includes notes on Nginx, ZFS, and GELI-encrypted VMs.

Link

“Review: FreeBSD 15.1 with an install-time desktop” (Tux Machines, July 6)

A review of the new desktop installation option in FreeBSD 15.1, which lets you set up KDE directly during installation. FreeBSD 15.1 also received improved WiFi support (Linux 7.0 WLAN drivers) and a boot-time scheduler switch.

“FreeBSD Foundationals: The Boot Process” (Larvitz Blog)

Third installment of a FreeBSD fundamentals series: from the loader through kernel boot to boot environments. Ideal for newcomers wanting to understand how FreeBSD starts up.

Interview: FreeBSD Core Team Contributor 2026 (freebsd-howto.com)

An in-depth two-hour interview with Marcus Hellberg, kernel engineer and core team member. Topics include the 14.x consolidation cycle, the WITHOUTASLR removal (ASLR is now non-optional), OpenZFS synchronization practices, and the jails roadmap. Notable quote on the ASLR debate: *”Removing WITHOUTASLR was a statement: this is not optional anymore.”* On the future of jails: standardized image formats and better orchestration tooling are on the wish list.

Link

FreeBSD 15.1: Post-Release

FreeBSD 15.1-RELEASE was announced on June 16, 2026. In the weeks following, upgrade guides and first-hand reports dominated the community. Key new features in 15.1:

  • WiFi drivers from Linux 7.0 (iwlwifi and others)
  • Boot-time CPU scheduler switch (no longer compile-time only)
  • KDE desktop installation option in the installer
  • Improved laptop support (suspend/resume, better WiFi)
  • C23 compiler support in the standard toolchain

Support timeline: 15.1 is supported until March 31, 2027. 15.0 reaches EOL on September 30, 2026.

Valuable News – July 7, 2026 (vermaden)

The weekly “Valuable News” roundup from vermaden covers: FreeBSD boot process fundamentals, running pkgbasify on FreeBSD 15.1, upgrading from 15.0 to 15.1, and more community topics.

Link

Outlook

With 13 critical security vulnerabilities patched at the end of June, the most urgent task for all FreeBSD administrators is: update your systems. The 15.0 EOL is approaching (September 30), making an upgrade to 15.1 strongly recommended. Community discussions around desktop experience, memory monitoring, and jails orchestration show that FreeBSD continues to mature as both a workstation and server platform.