The FreeBSD developers have decided to assign Tier 1 status to the ARM64 (AArch64) port in the new branch of FreeBSD 13, which is expected to be released on April 13. Previously, this level of support was provided for 64-bit x86 systems (the i386 architecture was also primary until January when it was downgraded to Tier 2).
Tier 1 support implies the creation of installation builds, binary updates, and ready-to-use packages, as well as guarantees to resolve specific issues and to maintain ABI stability for the user environment and the kernel (except for certain subsystems). Tier 1 is supported by teams responsible for addressing vulnerabilities, preparing releases, and maintaining ports.
Additionally, three vulnerabilities in FreeBSD can be noted:
- CVE-2021-29626 — a non-privileged local process can read the memory contents of the kernel or other processes by manipulating memory page mappings. This vulnerability is caused by a flaw in the virtual memory subsystem that allows memory sharing between processes, leading to continued memory binding to a process after the associated memory page has been released.
- CVE-2021-29627 — a non-privileged local user can escalate their privileges in the system or read the contents of the kernel memory. The issue arises from accessing memory after it has been freed (use-after-free) in the implementation of the accept filter mechanism.
- CVE-2020-25584 — a potential bypass of the Jail isolation mechanism. A user inside the isolated environment, who has the right to mount file systems (allow.mount), can change the root directory to a position outside the Jail hierarchy and gain full read and write access to all system files.
Source: opennet.ru
