Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2021-29628

In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause SMAP protections to be disabled for the duration of the system call. This weakness could be combined with other kernel bugs to craft an exploit.

  • Published: May 28, 2021
  • Updated: Apr 14, 2023
  • CVE: CVE-2021-29628
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
freebsd / freebsd 12.2-p1 12.2-p1.x
freebsd / freebsd 12.2-p2 12.2-p2.x
freebsd / freebsd 12.2 12.2.x
freebsd / freebsd 12.2-p3 12.2-p3.x
freebsd / freebsd 12.2-p4 12.2-p4.x
freebsd / freebsd 13.0-rc4 13.0-rc4.x
freebsd / freebsd 13.0-rc3 13.0-rc3.x
freebsd / freebsd 13.0-beta3-p1 13.0-beta3-p1.x
freebsd / freebsd 12.2-p5 12.2-p5.x
freebsd / freebsd 13.0-rc5-p1 13.0-rc5-p1.x
freebsd / freebsd 12.2-p6 12.2-p6.x
freebsd / freebsd 13.0 13.0.x
freebsd / freebsd 12.2-beta1-p1 12.2-beta1-p1.x