CVE-2022-23085: Potential jail escape vulnerabilities in netmap
A user-provided integer option was passed to nmreqcopyin() without checking if it would overflow. This insufficient bounds checking could lead to kernel memory corruption.
On systems configured to include netmap in their devfsruleset, a privileged process running in a jail can affect the host environment.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-23085?
CVE-2022-23085 has a high severity rating due to its ability to cause kernel memory corruption.
How do I fix CVE-2022-23085?
To fix CVE-2022-23085, update your FreeBSD installation to a version that includes the security patch.
Which versions of FreeBSD are affected by CVE-2022-23085?
CVE-2022-23085 affects FreeBSD versions from 12.0 to 12.3 and various 13.x releases.
Can unprivileged users exploit CVE-2022-23085?
No, CVE-2022-23085 requires a privileged process running in a jail for exploitation.
What is the nature of the vulnerability in CVE-2022-23085?
CVE-2022-23085 is an insufficient bounds checking vulnerability that can lead to kernel memory corruption.