PT-2022-6217

CVE-2022-23085

Published

2022-02-18

Updated

2024-12-09

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeBSD (affected versions not specified)

Description The issue is caused by an integer overflow in the nmreq copyin() function of the netmap component. This insufficient bounds checking could lead to kernel memory corruption. On systems configured to include netmap in their devfs ruleset, a privileged process running in a jail can affect the host environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Lucas Leong

Reno Robert

Wmliang

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

CWE-190: Integer Overflow or Wraparound

CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')