Vulnerability · Published Mar 26, 2021 · Assigned by freebsd

CVE-2020-25581

High 7.5

In plain English

A high-severity security flaw in FreeBSD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)0.8%top 43.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes.

Affected products (as reported)

Vendor	Product	Versions
n/a	FreeBSD	FreeBSD 12.2-RELEASE before p4, 11.4-RELEASE before p8

References

https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc x_refsource_MISC
https://security.netapp.com/advisory/ntap-20210423-0006/ x_refsource_CONFIRM