CVE-2021-29628

Published: May 28, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause SMAP protections to be disabled for the duration of the system call. This weakness could be combined with other kernel bugs to craft an exploit.

Affected (13)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 12.2
Freebsd Freebsd	Version 12.2 beta1-p1
Freebsd Freebsd	Version 12.2 p1
Freebsd Freebsd	Version 12.2 p2
Freebsd Freebsd	Version 12.2 p3
Freebsd Freebsd	Version 12.2 p4
Freebsd Freebsd	Version 12.2 p5
Freebsd Freebsd	Version 12.2 p6
Freebsd Freebsd	Version 13.0
Freebsd Freebsd	Version 13.0 beta3-p1
Freebsd Freebsd	Version 13.0 rc3
Freebsd Freebsd	Version 13.0 rc4
Freebsd Freebsd	Version 13.0 rc5-p1