VULNERABILITY INTELLIGENCE

CVE-2021-29628

CVSS score7.5 HIGH

EPSS probability1.25%

CISA KEVNot currently listed

Published2021-05-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause SMAP protections to be disabled for the duration of the system call. This weakness could be combined with other kernel bugs to craft an exploit.

Weakness classification

nvd@nist.gov: CWE-863

Primary references

secteam@freebsd.org — Exploit, Vendor Advisory
secteam@freebsd.org — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory