CVE-2024-39281

Description

The command ctl_persistent_reserve_out allows the caller to specify an arbitrary size which will be passed to the kernel's memory allocator.

Reserved 2024-08-27 | Published 2024-11-12 | Updated 2024-11-26 | Assigner freebsd

Problem types

CWE-20 Improper Input Validation

Product status

Default status
unknown

14.1-RELEASE before p6
affected

13.4-RELEASE before p2
affected

13.3-RELEASE before p8
affected

Credits

Synacktiv finder

The FreeBSD Foundation sponsor

The Alpha-Omega Project sponsor

References

security.freebsd.org/advisories/FreeBSD-SA-24:18.ctl.asc vendor-advisory

cve.org (CVE-2024-39281)

nvd.nist.gov (CVE-2024-39281)

Download JSON