CVE-2013-6832: Freebsd

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.

Affected products

• Freebsd Freebsd: up to and including 10.0; version 0.4_1 only; version 1.0 only; version 1.1 only; version 1.1.5 only; version 1.1.5.1 only; …

Published 2013-11-21. Last modified 2026-06-17.