Privilege escalation in Freebsd
CVE-2025-15547
By default, jailed processes cannot mount filesystems, including nullfs(4). However, the allow.mount.nullfs option enables mounting nullfs filesystems, subject to privilege checks. If a privileged user within a jail is able to nullfs-mou…
Vulnerability class: Privilege Escalation
EPSS: 0.000 (7.2th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 14.3-RELEASE, 13.5-RELEASE
Weakness classification (CWE)
References
- security.freebsd.org/advisories/FreeBSD-SA-26:02.jail.asc (vendor-advisory)