CVE-2021-29628

EUVD-2021-16104
In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause SMAP protections to be disabled for the duration of the system call. This weakness could be combined with other kernel bugs to craft an exploit.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
Affected Products (NVD)
VendorProductVersion
freebsdfreebsd
12.2
freebsdfreebsd
12.2:beta1-p1
freebsdfreebsd
12.2:p1
freebsdfreebsd
12.2:p2
freebsdfreebsd
12.2:p3
freebsdfreebsd
12.2:p4
freebsdfreebsd
12.2:p5
freebsdfreebsd
12.2:p6
freebsdfreebsd
13.0
freebsdfreebsd
13.0:beta3-p1
freebsdfreebsd
13.0:rc3
freebsdfreebsd
13.0:rc4
freebsdfreebsd
13.0:rc5-p1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.FreeBSD.org/advisories/FreeBSD-SA-21:11.smap.asc
https://security.netapp.com/advisory/ntap-20210713-0002/
https://security.FreeBSD.org/advisories/FreeBSD-SA-21:11.smap.asc
https://security.netapp.com/advisory/ntap-20210713-0002/