CVE-2022-23091

Published: Feb 15, 2024

Modified: Feb 13, 2025

PUBLISHED

Description

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to other processes or the kernel.

Vendor	Product	Versions
FreeBSD	FreeBSD	affected `13.1-RELEASE - < p1` affected `13.0-RELEASE - < p12` affected `12.3-RELEASE - < p6`

References

https://security.freebsd.org/advisories/FreeBSD-SA-22:11.vm.asc

vendor-advisory

https://security.netapp.com/advisory/ntap-20240415-0008/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-23091

Description

Affected Products

References