Rapid7’s 2026 Global Cybersecurity Summit is now available on-demand.Watch sessions.
Rapid7

vulnerability

FreeBSD: VID-7e079ce2-6b51-11ef-9a62-002590c1f29c (CVE-2024-43102): FreeBSD -- umtx Kernel panic or Use-After-Free

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Sep 5, 2024
Added
Sep 6, 2024
Modified
Jun 15, 2026

Description

Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference count of the object representing the mapping too many times, causing it to be freed too early.

A malicious code exercizing the UMTX_SHM_DESTROY sub-request in parallel can panic the kernel or enable further Use-After-Free attacks, potentially including code execution or Capsicum sandbox escape.

Solutions

freebsd-upgrade-base-14_1-release-p4freebsd-upgrade-base-14_0-release-p10freebsd-upgrade-base-13_3-release-p6
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.