What’s Vulnerable › Vulnerabilities

CVE-2025-0662: Uninitialized kernel memory disclosure via ktrace(2)

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-30 · updated 2026-06-17
• Weakness: CWE-122

Description

In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sized sockaddr to userspace. There, the full sockaddr is copied, even when it is shorter than the full size. This can result in up to 14 uninitialized bytes of kernel memory being copied out to userspace. It is possible for an unprivileged userspace program to leak 14 bytes of a kernel heap allocation to userspace.

Affected products

• FreeBSD: from 14.2-RELEASE before p1 — fixed in p1

How to fix

Upgrade to a fixed version: FreeBSD p1. Check the vendor advisory for mitigations.

References

• https://security.freebsd.org/advisories/FreeBSD-SA-25:04.ktrace.asc
• https://security.netapp.com/advisory/ntap-20250207-0006/

Get alerted when CVE-2025-0662 or the next vulnerability affects your stack