CVE-2024-43102: umtx Kernel panic or Use-After-Free
Concurrent removals of certain anonymous shared memory mappings by using the UMTXSHMDESTROY sub-request of UMTXOPSHM can lead to decreasing the reference count of the object representing the mapping too many times, causing it to be freed too early.
A malicious code exercizing the UMTXSHMDESTROY sub-request in parallel can panic the kernel or enable further Use-After-Free attacks, potentially including code execution or Capsicum sandbox escape.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43102?
CVE-2024-43102 has a high severity rating due to the potential for early freeing of memory objects, which can lead to application instability or vulnerabilities.
How do I fix CVE-2024-43102?
To fix CVE-2024-43102, update your FreeBSD system to the latest version or apply the relevant patches provided.
Which versions of FreeBSD are affected by CVE-2024-43102?
CVE-2024-43102 affects FreeBSD versions 13.0 to 13.3 and various 14.x versions, including the beta and patch releases.
What type of vulnerability is CVE-2024-43102?
CVE-2024-43102 is a memory management vulnerability that involves concurrent removals of shared memory mappings.
Is CVE-2024-43102 remotely exploitable?
CVE-2024-43102 may be exploitable remotely depending on the application context and server configuration.