Rapid7

vulnerability

FreeBSD: VID-7e079ce2-6b51-11ef-9a62-002590c1f29c (CVE-2024-43102): FreeBSD -- umtx Kernel panic or Use-After-Free

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Sep 5, 2024
Added
Sep 6, 2024
Modified
Mar 25, 2026

Description

Problem Description: Concurrent removals of such a mapping by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference count of the object representing the mapping too many times, causing it to be freed too early. Impact: A malicious code exercizing the UMTX_SHM_DESTROY sub-request in parallel can panic the kernel or enable further Use-After-Free attacks, potentially including code execution or Capsicum sandbox escape.

Solutions

freebsd-upgrade-base-14_1-release-p4freebsd-upgrade-base-14_0-release-p10freebsd-upgrade-base-13_3-release-p6
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.