FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAmd Amd64
HWAmdall versionsFreebsd
OSFreebsd5.0 – 5.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
Related vulnerabilities
CVE-2026-58082CRITICAL9.8same product
The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate character outp...
CVE-2026-58081CRITICAL9.8same product
Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-sup...
CVE-2024-43102CRITICAL10.0PL ✓same product
FreeBSD UMTX_SHM_DESTROY: use-after-free umożliwiający RCE lub ucieczkę z sandboxa
CVE-2024-29937CRITICAL9.8PL ✓same product
RCE w implementacji NFS w OpenBSD i FreeBSD — zdalne wykonanie kodu
CVE-2022-23088CRITICAL9.8PL ✓same product
FreeBSD: przepełnienie bufora w obsłudze beacon 802.11s prowadzące do RCE