MNBSD-2014-12: Kernel memory leak in sandboxed namei path lookup

Description

When a Capsicum-sandboxed process performed a namei lookup of a nonexistent path name, the kernel could leak memory. This could lead to resource exhaustion and disclosure of kernel memory.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-14:22.namei.asc
• https://www.cve.org/CVERecord?id=CVE-2014-3711

Additional Information

Aliases: CVE-2014-3711

Published: October 21, 2014
Last Modified: October 21, 2014