CVE-2024-25941 — jail(2) information leak
The jail(2) system call has not limited a visiblity of allocated TTYs (the kern.ttys sysctl). This gives rise to an information leak about processes outside the current jail. …
Published: 2024-02-15 · CVSS: 3.3 · CVSS 3.1
The jail(2) system call has not limited a visiblity of allocated TTYs (the kern.ttys sysctl). This gives rise to an information leak about processes outside the current jail. Attacker can get information about TTYs allocated on the host or in other jails. Effectively, the information printed by "pstat -t" may be leaked.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7