Vulnerabilities > CVE-2021-29628 - Incorrect Authorization vulnerability in Freebsd 12.2/13.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
freebsd
CWE-863

Summary

In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause SMAP protections to be disabled for the duration of the system call. This weakness could be combined with other kernel bugs to craft an exploit.

Vulnerable Configurations

Part Description Count
OS
Freebsd
13

Common Weakness Enumeration (CWE)