CVE-2024-39281

CVE-2024-39281: Unbounded allocation in ctl(4) CAM Target Layer

Vendor Freebsd
Product FreeBSD
Weakness CWE-20 · Input validation
Published November 12, 2024
Last update January 10, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The command ctl_persistent_reserve_out allows the caller to specify an arbitrary size which will be passed to the kernel's memory allocator.

Key dates

02Disclosure timeline

November 12, 2024 CVE published
January 10, 2025 Record updated