8.8

CVE-2025-15547

Jail escape by a privileged user via nullfs

By default, jailed processes cannot mount filesystems, including nullfs(4).  However, the allow.mount.nullfs option enables mounting nullfs filesystems, subject to privilege checks.

If a privileged user within a jail is able to nullfs-mount directories, a limitation of the kernel's path lookup logic allows that user to escape the jail's chroot, yielding access to the full filesystem of the host or parent jail.

In a jail configured to allow nullfs(4) mounts from within the jail, the jailed root user can escape the jail's filesystem root.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version 13.5 Update -
Freebsd ≫ Freebsd Version 13.5 Update p1
Freebsd ≫ Freebsd Version 13.5 Update p2
Freebsd ≫ Freebsd Version 13.5 Update p3
Freebsd ≫ Freebsd Version 13.5 Update p4
Freebsd ≫ Freebsd Version 13.5 Update p5
Freebsd ≫ Freebsd Version 13.5 Update p6
Freebsd ≫ Freebsd Version 13.5 Update p7
Freebsd ≫ Freebsd Version 13.5 Update p8
Freebsd ≫ Freebsd Version 14.3 Update -
Freebsd ≫ Freebsd Version 14.3 Update p1
Freebsd ≫ Freebsd Version 14.3 Update p2
Freebsd ≫ Freebsd Version 14.3 Update p3
Freebsd ≫ Freebsd Version 14.3 Update p4
Freebsd ≫ Freebsd Version 14.3 Update p5
Freebsd ≫ Freebsd Version 14.3 Update p6
Freebsd ≫ Freebsd Version 14.3 Update p7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.016
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA-ADP 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://security.freebsd.org/advisories/FreeBSD-SA-26:02.jail.asc
Vendor Advisory