CVE-2009-3527: Freebsd

Medium severity, CVSS 6.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues, which triggers a use after free, leading to a NULL pointer dereference or memory corruption.

Affected products

• Freebsd Freebsd: version 6.3 only; version 6.4 only

Published 2009-10-06. Last modified 2026-06-16.