title: Potential jail escape vulnerabilities in netmap
description: A user-provided integer option was passed to nmreq_copyin() without checking if it would overflow.  This insufficient bounds checking could lead to kernel memory corruption.
On systems configured to include netmap in their devfs_ruleset, a privileged process running in a jail can affect the host environment.
affected:
{
defaultStatus: unknown
modules: netmap
product: FreeBSD
vendor: FreeBSD
versions:
lessThan: p1, status: affected, version: 13.1-RC1, versionType: release
lessThan: p11, status: affected, version: 13.0-RELEASE, versionType: release
lessThan: p5, status: affected, version: 12.3-RELEASE, versionType: release
}