CVE-2024-39281

Summary

The command ctl_persistent_reserve_out allows the caller to specify an arbitrary size which will be passed to the kernel's memory allocator.

Affected Software

VendorProductVersion RangeStatus
FreeBSDFreeBSD14.1-RELEASE < p6affected
FreeBSDFreeBSD13.4-RELEASE < p2affected
FreeBSDFreeBSD13.3-RELEASE < p8affected

Weaknesses

  • CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

CVE Program Container

Additional References

References