A critical stack buffer overflow vulnerability in the FreeBSD kernel allows unprivileged users to cause a system-wide denial of service through a kernel panic.

The flaw exists in the rtsock_msg_buffer function, which fails to validate the length of sockaddr structures before copying them to the stack. This permits an unprivileged user to trigger a 127 byte buffer overflow, which overwrites the stack canary and forces a kernel panic.

The primary impact of this vulnerability is a denial of service, as successful exploitation results in an immediate kernel panic and system crash. While the current mitigation (the stack canary) prevents direct code execution, the potential exists for local privilege escalation if secondary vulnerabilities are used to leak the canary value. Given the CVSS score of 7.5, this poses a significant threat to system availability in multi-user or shared hosting environments.

Immediate Action: Update FreeBSD systems to the patched releases identified in the FreeBSD security advisory SA-26:05.route.

Proactive Monitoring: Monitor system logs for repeated, unexplained kernel panics or crashes which may indicate an attempt to trigger this overflow.

Compensating Controls: Restrict access to routing sockets or limit the ability of untrusted users to execute arbitrary code on the host system to reduce the attack surface.

Public Exploit Available: No (exploit_available: false)

Administrators should prioritize patching as soon as possible to maintain system stability and prevent denial of service attacks. Although the current impact is primarily limited to kernel panics, the potential for future escalation necessitates a proactive maintenance approach to ensure the integrity of the kernel environment.