Medium severity · published Jan 30, 2025
CVE-2025-0662
Uninitialized kernel memory disclosure via ktrace(2)
4.9
CVSS
0.4%
EPSS
No
On KEV
Description
In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sized sockaddr to userspace. There, the full sockaddr is copied, even when it is shorter than the full size. This can result in up to 14 uninitialized bytes of kernel memory being copied out to userspace.
It is possible for an unprivileged userspace program to leak 14 bytes of a kernel heap allocation to userspace.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
FreeBSD · FreeBSD
14.2-RELEASE before p1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-0662
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-0662
security.freebsd.org
https://security.freebsd.org/advisories/FreeBSD-SA-25:04.ktrace.asc
security.netapp.com
https://security.netapp.com/advisory/ntap-20250207-0006/
More from FreeBSD
10.0
CVE-2024-43102
umtx Kernel panic or Use-After-Free
10.0
CVE-2018-17160
In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can permit a guest operating system to…
9.8
CVE-2026-101306
Multiple jail filesystem root escapes
9.8
CVE-2026-58082
Stack based buffer overflow in iconv(3)
9.8
CVE-2026-58081
Heap based buffer overflow in iconv(3)