MNBSD-2008-11: Insufficiently initialized bluetooth and netgraph network protocol handlers

Description

Bluetooth and netgraph socket protocol handlers were not initialized properly, leaving function pointers uninitialized. A local user could exploit this to cause a denial of service or potentially execute arbitrary code with kernel privileges. The fix was available in RELENG_0_2, RELENG_0_1, and current. This corresponds to FreeBSD-SA-08:13.protosw.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-08:13.protosw.asc
• https://www.cve.org/CVERecord?id=CVE-2008-5736

Additional Information

Aliases: CVE-2008-5736

Published: December 31, 2008
Last Modified: December 31, 2008