PT-2021-3594 · Freebsd · Freebsd
Ryan Libby
·
Published
2021-04-06
·
Updated
2022-05-27
·
CVE-2021-29626
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
FreeBSD versions 13.0-STABLE before n245117
FreeBSD versions 12.2-STABLE before r369551
FreeBSD versions 11.4-STABLE before r369559
FreeBSD versions 13.0-RC5 before p1
FreeBSD versions 12.2-RELEASE before p6
FreeBSD versions 11.4-RELEASE before p9
Description
The issue is related to the use of memory after it has been freed, which can allow an unauthorized party to gain access to protected information. Specifically, the copy-on-write logic failed to invalidate shared memory page mappings between multiple processes, allowing an unprivileged process to maintain a mapping after it is freed. This enables the process to read private data belonging to other processes or the kernel.
Recommendations
For FreeBSD versions 13.0-STABLE before n245117, update to a version after n245117.
For FreeBSD versions 12.2-STABLE before r369551, update to a version after r369551.
For FreeBSD versions 11.4-STABLE before r369559, update to a version after r369559.
For FreeBSD versions 13.0-RC5 before p1, update to a version after p1.
For FreeBSD versions 12.2-RELEASE before p6, update to a version after p6.
For FreeBSD versions 11.4-RELEASE before p9, update to a version after p9.
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freebsd