Description
A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.
References
- 18599 third-party-advisory
- 1015541 vdb-entry
- 22731 vdb-entry
- bsd-buffer-length-disclosure(24340) vdb-entry
- 16373 vdb-entry