ZeroHour

CVE-2022-23091

CVSS 3.1
4.0 medium
EPSS
<1%p7
Published
()
Modified
Description

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to other processes or the kernel.

Vendors
freebsd
Products
freebsd
Weakness
CWE-401
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

In the news

No ingested article mentions this CVE yet.