MNBSD-2022-12: Virtual memory use-after-free via retained mapping of a freed page

Description

A flaw in the virtual memory system allowed an unprivileged local user to maintain a mapping of a page after it had been freed, enabling unauthorized access to sensitive data belonging to other processes or the kernel.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-22:11.vm.asc
• https://www.cve.org/CVERecord?id=CVE-2022-23091
• https://github.com/MidnightBSD/src/commit/0c88ecaa1255

Additional Information

Aliases: CVE-2022-23091

Published: August 09, 2022
Last Modified: August 09, 2022