CVE-2020-25581: Race Condition

Published Mar 26, 2021

Updated

In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jailremove(2) implementation, it may fail to kill some of the processes.

Affected Software

12 affected components

FreeBSD FreeBSD=11.4

FreeBSD FreeBSD=11.4-p1

FreeBSD FreeBSD=11.4-p2

FreeBSD FreeBSD=11.4-p3

FreeBSD FreeBSD=11.4-p4

FreeBSD FreeBSD=11.4-p5

FreeBSD FreeBSD=11.4-p6

FreeBSD FreeBSD=11.4-p7

FreeBSD FreeBSD=12.2

FreeBSD FreeBSD=12.2-p1

FreeBSD FreeBSD=12.2-p2

FreeBSD FreeBSD=12.2-p3

Event History

Mar 26, 2021

CVE Published

via MITRE·08:40 PM

Data Sourced

via MITRE·08:40 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this FreeBSD vulnerability?

The vulnerability ID is CVE-2020-25581.

What is the severity of CVE-2020-25581?

The severity of CVE-2020-25581 is high with a severity value of 7.5.

What is the affected software?

The affected software is FreeBSD 11.4-p1, 11.4-p2, 11.4-p3, 11.4-p4, 11.4-p5, 11.4-p6, 11.4-p7, 12.2-p1, 12.2-p2, and 12.2-p3.

What is the description of CVE-2020-25581?

CVE-2020-25581 is a vulnerability in FreeBSD that allows a race condition in the jail_remove(2) implementation, causing the failure to kill some processes.

Where can I find more information about CVE-2020-25581?

You can find more information about CVE-2020-25581 at the following URLs: [FreeBSD-SA-21:04.jail_remove.asc](https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc) and [ntap-20210423-0006](https://security.netapp.com/advisory/ntap-20210423-0006/).