CVE-2025-15547 - Vulnerability Analysis

Overview

FreeBSD jail with allow.mount.nullfs enabled contains a privilege escalation caused by kernel path lookup logic limitation in nullfs mounts, letting privileged jailed users escape the jail's filesystem root, exploit requires privileged user within the jail.

Severity & Score

Impact

Privileged jailed users can escape the jail and access the full host filesystem, compromising system security.

Mitigation

Disable allow.mount.nullfs or update to a FreeBSD version with the kernel path lookup limitation fixed.

References

• https://security.freebsd.org/advisories/FreeBSD-SA-26:02.jail.asc

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner