CVE-2022-23084

2024-02-1505:15:08

[email protected]

web.nvd.nist.gov

cve-2022-23084

time-of-check to time-of-use bug

netmap

kernel memory corruption

devfs_ruleset

nvd

6.3 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.4%

JSON

The total size of the user-provided nmreq to nmreq_copyin() was first computed and then trusted during the copyin. This time-of-check to time-of-use bug could lead to kernel memory corruption.

On systems configured to include netmap in their devfs_ruleset, a privileged process running in a jail can affect the host environment.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "netmap"
    ],
    "product": "FreeBSD",
    "vendor": "FreeBSD",
    "versions": [
      {
        "lessThan": "p1",
        "status": "affected",
        "version": "13.1-RC1",
        "versionType": "release"
      },
      {
        "lessThan": "p11",
        "status": "affected",
        "version": "13.0-RELEASE",
        "versionType": "release"
      },
      {
        "lessThan": "p5",
        "status": "affected",
        "version": "12.3-RELEASE",
        "versionType": "release"
      }
    ]
  }
]