Vulnerabilities in FreeBSD that allow for privilege escalation or bypassing guest system isolation
Several vulnerabilities have been addressed in FreeBSD that allow a local user to escalate their privileges, execute code in the kernel context, or escape an isolated environment: CVE-2024-43102 — a race condition in the implementation of the _umtx_op system call can be exploited to access an already freed memory area (Use-After-Free) by simultaneously sending multiple UMTX_SHM_DESTROY subrequests. This vulnerability potentially allows bypassing the isolation limits of the Capsicum mechanism […]
