The flaw causes the kernel to record the return value of an internal setup function instead of the true result of a system call executed under ptrace(PT_SC_REMOTE). As a result, audit logs falsely indicate successful completion for operations that actually failed, producing misleading audit trails. This reflects weaknesses in audit record integrity (CWE-223) and violations of expected return status handling (CWE-224).

The vulnerability affects the FreeBSD operating system. Specific product and version ranges are not enumerated in the advisory; any releases lacking the fix are potentially impacted.

The CVSS score of 3.3 indicates low severity. The EPSS score indicates a very low probability of exploitation, and the issue is not listed in CISA KEV. The attack vector requires a user with debugging privileges to attach to a target process via ptrace; based on the description it is inferred that such privileges are necessary, so unauthenticated users cannot exploit this flaw. With these prerequisites, an attacker could create false audit evidence to evade detection, but the overall exploitability remains limited by the need for debugger privileges.