CVE-2024-39281

MEDIUM

FreeBSD 14.1-RELEASE < p6, 13.4-RELEASE < p2, 13.3-RELEASE < p8 - Memory Allocation via ctl_persistent_reserve_out

Title source: llm

The command ctl_persistent_reserve_out allows the caller to specify an arbitrary size which will be passed to the kernel's memory allocator.

Core 2

Core References

Vendor Advisory

Various Sources vendor-advisory

CVSS v3 5.3

EPSS 0.0014

EPSS Percentile 32.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-20

Status published

Products (3)

FreeBSD/FreeBSD 13.3-RELEASE - p8

FreeBSD/FreeBSD 13.4-RELEASE - p2

FreeBSD/FreeBSD 14.1-RELEASE - p6

Published Nov 12, 2024

Tracked Since Feb 18, 2026