FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

FreeBSD -- Lost mbuf flag resulting in data corruption

Affected packages
7.1 <= FreeBSD < 7.1_13
7.3 <= FreeBSD < 7.3_2
8.0 <= FreeBSD < 8.0_4


VuXML ID 7a09a8df-ca41-11df-aade-0050568f000c
Discovery 2010-07-13
Entry 2010-10-24
Modified 2016-08-09

Problem Description:

The read-only flag is not correctly copied when a mbuf buffer reference is duplicated. When the sendfile(2) system call is used to transmit data over the loopback interface, this can result in the backing pages for the transmitted file being modified, causing data corruption.


FreeBSD Advisory SA-10:07.mbuf