CVE-2025-0662

MEDIUM

4.9

Description

In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sized sockaddr to userspace. There, the full sockaddr is copied, even when it is shorter than the full size. This can result in up to 14 uninitialized bytes of kernel memory being copied out to userspace. It is possible for an unprivileged userspace program to leak 14 bytes of a kernel heap allocation to userspace.

CVE Details

CVSS v3.1 Score4.9

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

Published1/30/2025

Last Modified2/7/2025

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-122

References

https://security.freebsd.org/advisories/FreeBSD-SA-25:04.ktrace.asc(secteam@freebsd.org)

https://security.netapp.com/advisory/ntap-20250207-0006/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.