Yizhou Zhao

**Name of the Vulnerable Software and Affected Versions** FreeBSD (affected versions not specified) **Description** The `ptrace(PT SC REMOTE)` function failed to properly validate parameters for the `syscall(2)` and ` syscall(2)` meta-system calls. This allows a user with debugging capabilities to trigger arbitrary code execution in the kernel, regardless of the target process's privileges. An unprivileged local user can exploit this to escalate privileges and potentially gain full control of the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** An issue exists in the handling of RAW sockets using the `IPPROTO RAW` protocol. A malicious incoming ICMP packet can have its protocol field set to 255, allowing it to match a socket created with `socket(AF INET, SOCK RAW, 255)`. This can lead to unauthorized changes in the Forwarding Next Hop Exception (FNHE) cache. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.