Lucene search
HistoryFeb 15, 2024 - 5:15 a.m.
CVE-2022-23084
user-provided
nmreq_copyin
kernel memory corruption
devfs_ruleset
jail
The total size of the user-provided nmreq to nmreq_copyin() was first computed and then trusted during the copyin. This time-of-check to time-of-use bug could lead to kernel memory corruption.
On systems configured to include netmap in their devfs_ruleset, a privileged process running in a jail can affect the host environment.
Related
zdi
zdi
cvelist
cvelist
CVE-2022-23084 Potential jail escape vulnerabilities in netmap
2024-02-15 04:52:09
prion
prion
Memory corruption
2024-02-15 05:15:00
cve
cve
CVE-2022-23084
2024-02-15 05:15:08
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:04.netmap
2022-04-06 00:00:00
nessus
nessus
freebsd
freebsd
FreeBSD -- Potential jail escape vulnerabilities in netmap
2022-04-06 00:00:00