CVE-2020-25581 Race condition in FreeBSD

High 7.5 Published 26 Mar 2021 Updated 4 Aug 2024

A race condition in FreeBSD's jail_remove implementation may fail to kill processes, potentially leading to resource exhaustion or denial of service.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-25581?

CVE-2020-25581 is a high-severity vulnerability in Freebsd Freebsd, published on 26 Mar 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes.

Weakness: CWE-362

Which versions are affected by CVE-2020-25581?

It affects 1 product.

Products include Freebsd Freebsd.

How do I fix CVE-2020-25581?

No fix has been published for CVE-2020-25581 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-25581 being exploited?

There is no known exploitation of CVE-2020-25581 in the wild and no public exploit code.

All Freebsd Freebsd vulnerabilities

Sources

Also known as GHSA-m73c-c6gx-rc72.