Certain kernel system calls in FreeBSD, such as open(2) with the O_TRUNC flag and fspacectl(2), erroneously free memory associated with largepage objects. These operations are not allowed on largepage objects, but the implementation failed to enforce this rule. An unprivileged local user can exploit the bug to access freed kernel memory, potentially writing to it or reading sensitive data, which can be leveraged to gain elevated privileges on the system.

The vulnerability impacts the FreeBSD operating system. No version information is provided in the advisory, so all releases of FreeBSD that include the affected kernel components are potentially vulnerable.

The CVSS score of 8.4 indicates a high severity vulnerability. The EPSS score is reported as < 1%, suggesting a low probability of exploitation at the time of analysis. The issue is not listed in the CISA KEV catalog, but because it requires local, unprivileged access and can lead to privilege escalation, administrators should consider it a significant risk within a potentially compromised environment. The attack vector is local; an attacker must have physical or local access to the target machine.