A kernel heap memory corruption vulnerability in FreeBSD allows unprivileged local users to potentially escalate privileges.

The GETALL and SETALL commands in semctl(2) suffer from a sequence-number wraparound issue, which allows an unprivileged local user to bypass validation and perform out-of-bounds reads and writes on the kernel heap.

With a CVSS score of 7.8, this vulnerability poses a severe threat to system integrity and confidentiality. By corrupting kernel memory, an attacker could achieve local privilege escalation, effectively gaining full control over the affected FreeBSD system.

Immediate Action: Update FreeBSD systems to the patched versions: 15.1-RELEASE-p2, 15.0-RELEASE-p12, or 14.4-RELEASE-p8.

Proactive Monitoring: Monitor system logs for unusual kernel panics or repeated crashes of processes interacting with System V semaphores, which may indicate exploitation attempts.

Compensating Controls: Restrict access to the system to only trusted users, as this vulnerability requires local access to exploit.

Public Exploit Available: No — exploit_available (unknown).

System administrators should prioritize patching FreeBSD kernels to the specified security releases. This vulnerability represents a critical risk to kernel stability and security, and applying the vendor-supplied patch is the only effective way to prevent potential privilege escalation.