CVE-2022-23085

2024-02-1505:15:09

[email protected]

web.nvd.nist.gov

cve-2022-23085

integer overflow

nmreq_copyin()

kernel memory corruption

netmap

devfs_ruleset

privileged process

jail

security vulnerability

6.3 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.4%

JSON

A user-provided integer option was passed to nmreq_copyin() without checking if it would overflow. This insufficient bounds checking could lead to kernel memory corruption.

On systems configured to include netmap in their devfs_ruleset, a privileged process running in a jail can affect the host environment.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "netmap"
    ],
    "product": "FreeBSD",
    "vendor": "FreeBSD",
    "versions": [
      {
        "lessThan": "p1",
        "status": "affected",
        "version": "13.1-RC1",
        "versionType": "release"
      },
      {
        "lessThan": "p11",
        "status": "affected",
        "version": "13.0-RELEASE",
        "versionType": "release"
      },
      {
        "lessThan": "p5",
        "status": "affected",
        "version": "12.3-RELEASE",
        "versionType": "release"
      }
    ]
  }
]