CVE-2021-29626: Freebsd

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process to maintain a mapping after it is freed, allowing the process to read private data belonging to other processes or the kernel.

Affected products

• Freebsd Freebsd: before 11.4 (fixed in 11.4); from 12.0, before 12.2 (fixed in 12.2); version 11.4 only; version 12.2 only; version 13.0 only

Published 2021-04-07. Last modified 2026-06-17.