CVE-2024-43102: FreeBSD, грешка в паметта

Описание

Оригинално описание

Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference count of the object representing the mapping too many times, causing it to be freed too early. A malicious code exercizing the UMTX_SHM_DESTROY sub-request in parallel can panic the kernel or enable further Use-After-Free attacks, potentially including code execution or Capsicum sandbox escape.

Засегнати продукти

• FreeBSD FreeBSD: 14.1-RELEASE преди p4; 14.0-RELEASE преди p10; 13.3-RELEASE преди p6

Вид слабост

• CWE-416 Използване на памет след освобождаване (Use-After-Free)
• CWE-911 Improper Update of Reference Count

История

Други уязвимости в FreeBSD FreeBSD

• 7.0CVE-2026-101311
• 7.0CVE-2026-101310
• 7.0CVE-2026-101309
• 5.5CVE-2026-101308
• 8.2CVE-2026-101307

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-43102
• https://nvd.nist.gov/vuln/detail/CVE-2024-43102
• https://security.freebsd.org/advisories/FreeBSD-SA-24:14.umtx.asc
• https://security.netapp.com/advisory/ntap-20240916-0001/