CVE-2024-43102 umtx Kernel panic or Use-After-Free
Concurrent removal of shared memory mappings causes a use-after-free, allowing kernel panics or code execution via sandbox escape.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-43102?
CVE-2024-43102 is a critical use after free vulnerability in Freebsd Freebsd, published on 5 Sep 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference count of the object representing the mapping too many times, causing it to be freed too early.
A malicious code exercizing the UMTX_SHM_DESTROY sub-request in parallel can panic the kernel or enable further Use-After-Free attacks, potentially including code execution or Capsicum sandbox escape.
Which versions are affected by CVE-2024-43102?
It affects 1 product.
Products include Freebsd Freebsd.
How do I fix CVE-2024-43102?
No fix has been published for CVE-2024-43102 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2024-43102 being exploited?
There is no known exploitation of CVE-2024-43102 in the wild and no public exploit code.
Other vulnerabilities in Freebsd Freebsd
Sources
Also known as GHSA-v72r-7947-x8jx.