NetSight
medium4.0

CVE-2022-23091

A particular case of memory sharing is mishandled in the virtual memory system.

Impact

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to other processes or the kernel.

Affected products

VendorProductAffected versions
FreebsdFreebsd
before 12.3
Versions 12.3, 13.0, 13.1

Weakness classification

References