CVE-2025-14769

CVE-2025-14769 affects FreeBSD ipfw: the tcp-setmss handler may free packet data and raise an error without halting rule processing. A subsequent rule can then allow traffic after the data is gone, causing a NULL pointer dereference and a Denial of Service when remote-crafted packets are sent if ...