A race condition vulnerability in the FreeBSD kernel allows local attackers to perform out-of-bounds writes, potentially leading to privilege escalation.

A race condition exists where a process sharing an address space via rfork(2) can mutate the VM map during an ELF core dump, causing the kernel to write program headers past the allocated buffer.

The CVSS score of 7.4 underscores the potential for a complete system compromise. By triggering this race condition, a local attacker could overwrite sensitive kernel structures or function pointers, leading to unauthorized privilege escalation from a standard user to root.

Immediate Action: Update FreeBSD systems to the patched versions: 15.1-RELEASE-p2, 15.0-RELEASE-p12, or 14.4-RELEASE-p8.

Proactive Monitoring: Review system logs for unexpected core dump generation or suspicious process activity that utilizes rfork(2) in conjunction with memory-intensive operations.

Compensating Controls: Limit the ability of unprivileged users to trigger core dumps or restrict the execution of untrusted code on production systems.

Public Exploit Available: No — exploit_available (unknown).

Organizations should ensure all FreeBSD instances are updated to the latest security patch levels. Given that this flaw enables privilege escalation, it should be treated with urgency in any environment where multiple users or untrusted applications have access to the system.