Vulnerability in FreeBSD
CVE-2025-24934
Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host will not directly observe any problems. However, due to its membership in a load-balancing group, that socket will receive packets originating from any host. This breaks the contract of the connect(2) and implied connect via sendto(2), and may leave the application vulnerable to spoofing attacks. The kernel failed to check the connection state of sockets when adding them to load-balancing groups. Furthermore, when looking up the destination socket for an incoming packet, the kernel will match a socket belonging to a load-balancing group even if it is connected, in violation of the contract that connected sockets are only supposed to receive packets originating from the connected host.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.002 (10.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 11th percentile — 10.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- FreeBSD — versions 15.0-BETA2, 14.3-RELEASE, 13.5-RELEASE
Weakness classification (CWE)
References
- security.freebsd.org/advisories/FreeBSD-SA-25:09.netinet.asc (vendor-advisory)
- www.usenix.org/system/files/conference/usenixsecurity26/sec26_prepub_ben-simhon… (technical-description)
Frequently asked questions
- What is CVE-2025-24934?
- CVE-2025-24934 is a medium-severity vulnerability in FreeBSD, classified under CWE-488. CVSS score: 5.4/10. Published 2025-10-22.
- How severe is CVE-2025-24934?
- Medium severity. CVSS v3 base score is 5.4 out of 10.