lib9p Handle RWALK Messages Without Bounds Check, Leading to Memory Overwrite and Potential Code Execution

CVE-2022-23092

What is CVE-2022-23092?

A vulnerability within the lib9p implementation in FreeBSD relates to the mishandling of RWALK messages, specifically due to a lack of a crucial bounds check. This flaw allows attackers to send specially crafted messages that can lead to memory being overwritten. Once exploited, a malicious bhyve guest kernel can trigger this bug, resulting in the potential execution of user-mode code within the bhyve process. This poses significant security risks since it operates within bhyve's Capsicum sandbox, potentially compromising system integrity.

References