CVE-2024-43102(freebsd / freebsd)

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference count of the object representing the mapping too many times, causing it to be freed too early. A malicious code exercizing the UMTX_SHM_DESTROY sub-request in parallel can panic the kernel or enable further Use-After-Free attacks, potentially including code execution or Capsicum sandbox escape.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416CWE-911

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • freebsd

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
Products
freebsd

4 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-20: 110-20
Full discourse1 post
  • kuzi@kuzibelit

    More context: @ZIggyVall ‘s repo changelog claimes Probe 110a is testing SHM & robust-lists reachability on 454. Mutex lock returned TID 0x18DBB into memory. WebKit ASLR leaks hit a limit, syscall 454 opens a direct, unpatched path for CVE-2024-43102 memory corruption on 14.10

    0101031.8K
    521 followersView on X
CPE platform detail25 entries

25 of 25 entries

PartVendorProductVersionTarget SWTarget HW
OSfreebsdfreebsd---
OSfreebsdfreebsd13.3--
OSfreebsdfreebsd13.3--
OSfreebsdfreebsd13.3--
OSfreebsdfreebsd13.3--
OSfreebsdfreebsd13.3--
OSfreebsdfreebsd13.3--
OSfreebsdfreebsd13.4--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.0--
OSfreebsdfreebsd14.1--
OSfreebsdfreebsd14.1--
OSfreebsdfreebsd14.1--
OSfreebsdfreebsd14.1--

Explore more