MNBSD-2020-7: Use-after-free in IPv6 Hop-by-Hop options handling

Description

Due to improper mbuf handling in the kernel, a use-after-free bug could be triggered by sending IPv6 Hop-by-Hop options over the loopback interface.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-20:24.ipv6.asc
• https://www.cve.org/CVERecord?id=CVE-2020-7462

Additional Information

Aliases: CVE-2020-7462

Published: September 02, 2020
Last Modified: September 02, 2020