Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um Administratorrechte zu erlangen oder Daten zu manipulieren.
Product
FreeBSD ist ein Open Source Betriebssystem aus der BSD Familie und gehört damit zu den Unix Derivaten.
Vulnerabilities 2
-
High 8.4
Kernel use-after-free bug in the TIOCNOTTY handler
The implementation of TIOCNOTTY failed to clear a back-pointer from the structure representing the controlling terminal to the calling process' session. If the invoking process then exits, the terminal structure may end up containing a pointer to freed memory…
-
Medium 6.2
Missing large page handling in pmap_pkru_update_range()
In order to apply a particular protection key to an address range, the kernel must update the corresponding page table entries. The subroutine which handled this failed to take into account the presence of 1GB largepage mappings created using the shm_create_l…
Revision history
-
#1
Initiale Fassung
References
-
FreeBSD Security Advisory FreeBSD-SA-26:10.tty vom 2026-04-21
https://security.FreeBSD.org/advisories/FreeBSD-SA-26:10.tty.asc
-
FreeBSD Security Advisory FreeBSD-SA-26:11.amd64 vom 2026-04-21
https://security.FreeBSD.org/advisories/FreeBSD-SA-26:11.amd64.asc