CVE-2022-23091
—CVSS 3.1
4.0 medium
EPSS
<1%p7
Published
()
Modified
Description
A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to other processes or the kernel.
- Vendors
- freebsd
- Products
- freebsd
- Weakness
- CWE-401
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.