Skip to content
OpenAdvisories
Medium · 4.0 CVE-2022-23091 EUVD-2022-28196GHSA-66rh-g7jv-6752

Memory disclosure by stale virtual memory mapping

Published Feb 15, 2024 · Updated Feb 13, 2025 · Assigned by freebsd

Description

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause.

An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to other processes or the kernel.

Affected products

VendorProductAffectedFixed
FreeBSD FreeBSD 13.1-RELEASE – < p1, 13.0-RELEASE – < p12, 12.3-RELEASE – < p6 p1

References