Privilege escalation in Freebsd

CVE-2025-15547

By default, jailed processes cannot mount filesystems, including nullfs(4). However, the allow.mount.nullfs option enables mounting nullfs filesystems, subject to privilege checks. If a privileged user within a jail is able to nullfs-mou…

Vulnerability class: Privilege Escalation

EPSS: 0.000 (7.2th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 14.3-RELEASE, 13.5-RELEASE

Weakness classification (CWE)

References