High severity8.8NVD Advisory· Published Feb 15, 2024· Updated Jun 17, 2026
CVE-2022-23092
CVE-2022-23092
Description
The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory.
The bug can be triggered by a malicious bhyve guest kernel to overwrite memory in the bhyve(8) process. This could potentially lead to user-mode code execution on the host, subject to bhyve's Capsicum sandbox.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2813.1-RELEASE+ 25 more
- (no CPE)range: 13.1-RELEASE
- cpe:2.3:o:freebsd:freebsd:13.0:beta1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:beta2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:beta3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:beta3-p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:beta4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p10:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p11:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p9:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc5-p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.1:b1-p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.1:b2-p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.1:rc1-p1:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- security.freebsd.org/advisories/FreeBSD-SA-22:12.lib9p.ascnvdVendor Advisory
- security.netapp.com/advisory/ntap-20240415-0009/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.