CVE-2021-29628 Security feature bypass in FreeBSD
A system call fault can disable SMAP protections, allowing attackers to bypass kernel memory safety features and potentially exploit other kernel bugs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-29628?
CVE-2021-29628 is a high-severity vulnerability in Freebsd Freebsd, published on 28 May 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause SMAP protections to be disabled for the duration of the system call. This weakness could be combined with other kernel bugs to craft an exploit.
Weakness: CWE-863
Which versions are affected by CVE-2021-29628?
It affects 1 product.
Products include Freebsd Freebsd.
How do I fix CVE-2021-29628?
No fix has been published for CVE-2021-29628 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-29628 being exploited?
There is no known exploitation of CVE-2021-29628 in the wild and no public exploit code.
Other vulnerabilities in Freebsd Freebsd
Sources
Also known as GHSA-9m2j-xcq6-wjv7.