FreeBSD Ktrace Uninitialized Memory Disclosure Vulnerability

A vulnerability in the ktrace facility of FreeBSD 14.2 has been identified, allowing unprivileged userspace programs to leak up to 14 bytes of uninitialized kernel heap memory to userspace. This occurs because ktrace improperly handles variable-sized sockaddr structures, copying the full size even when the actual data is shorter, thereby exposing unused bytes of kernel memory.

Impact

Exploitation of this vulnerability results in the unauthorized disclosure of sensitive information from kernel memory to userspace.

Remediation

Users can upgrade to FreeBSD 14.2-RELEASE-p1 or apply a source code patch available from the FreeBSD Security Advisory FreeBSD-SA-25:04.ktrace.