CVE-2020-7462

5.5 mediumEPSS 0.2%

Medium (5.5) in freebsd freebsd. EPSS 0.2% chance of exploitation in the next 30 days.

In 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf handling in the kernel causes a use-after-free bug by sending IPv6 Hop-by-Hop options over the loopback interface. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2021-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

freebsd:freebsd

References

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:24.ipv6.asc
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:24.ipv6.asc

Check your stack JSON