https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:39:27.091979+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-23092 CVE-2022-23092 — Missing bounds check in 9p message handling 2026-10-15T07:39:27.093192+00:00

Affected: FreeBSD

The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory.

The bug can be triggered by a malicious bhyve guest kernel to overwrite memory in the bhyve(8) process. This could potentially lead to user-mode code execution on the host, subject to bhyve's Capsicum sandbox.