CVE-2022-23084 Potential jail escape vulnerabilities in netmap

2024-02-1504:52:09

freebsd

www.cve.org

cve-2022-23084

netmap

jail escape

vulnerabilities

time-of-check

time-of-use

kernel memory corruption

devfs_ruleset

privileged process

host environment

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

16.2%

JSON

The total size of the user-provided nmreq to nmreq_copyin() was first computed and then trusted during the copyin. This time-of-check to time-of-use bug could lead to kernel memory corruption.

On systems configured to include netmap in their devfs_ruleset, a privileged process running in a jail can affect the host environment.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "netmap"
    ],
    "product": "FreeBSD",
    "vendor": "FreeBSD",
    "versions": [
      {
        "lessThan": "p1",
        "status": "affected",
        "version": "13.1-RC1",
        "versionType": "release"
      },
      {
        "lessThan": "p11",
        "status": "affected",
        "version": "13.0-RELEASE",
        "versionType": "release"
      },
      {
        "lessThan": "p5",
        "status": "affected",
        "version": "12.3-RELEASE",
        "versionType": "release"
      }
    ]
  }
]