PT-2024-6401 · Freebsd+1 · Freebsd+1

Synacktiv

·

Published

2024-09-19

·

Updated

2024-10-23

·

CVE-2024-41721

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions FreeBSD (affected versions not specified)
Description The issue is related to an insufficient boundary validation in the USB code, which could lead to an out-of-bounds read on the heap, potentially resulting in an arbitrary write and remote code execution. This vulnerability affects the bhyve hypervisor's XHCI emulation functionality. The process bhyve typically runs with root privileges, increasing the potential impact. Although bhyve operates in an isolated environment using Capsicum, which limits available capabilities, the risk of exploitation remains. All supported versions of FreeBSD are affected, with systems using XHCI emulation being particularly vulnerable.
Recommendations To resolve the issue, update your FreeBSD system to a version that includes the fix released on September 19, 2024. After applying the updates or patches, it is crucial to restart all guest operating systems using USB devices with XHCI emulation to ensure the fixes take effect. As a temporary workaround, consider restricting the use of XHCI emulation in the bhyve hypervisor until a patch is available.

Fix

RCE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2024-07486
CVE-2024-41721
FREEBSD-SA-24_15

Affected Products

Freebsd
Bhyve