CVE-2009-1041: Freebsd

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.

Affected products

  • Freebsd Freebsd: version 7.0 only; version 7.1 only; version 7.2 only

Published 2009-03-26. Last modified 2026-06-16.