CVE-2024-45063 Multiple issues in ctl(4) CAM Target Layer

The function ctlwritebuffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process,...

CVE-2024-45063

The FreeBSD operating system contains a kernel Use-After-Free vulnerability in the ctl subsystem caused by the ctl_write_buffer function incorrectly setting a flag after a command finishes processing. Attackers can exploit this to achieve remote code execution on an iSCSI target host via a malici...