CVE-2020-25578

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not properly initializing the d_off field of the dirent structures returned by VOP_READDIR. In particular, tmpfs(5), smbfs(5), autofs(5) and mqueuefs(5) were failing to do so. As a result, eight uninitialized kernel stack bytes may be leaked to userspace by these file systems.

• CWE-665

• https://security.FreeBSD.org/advisories/FreeBSD-SA-21:01.fsdisclosure.ascVendor Advisory
• https://security.netapp.com/advisory/ntap-20210423-0002/Third Party Advisory
• https://security.FreeBSD.org/advisories/FreeBSD-SA-21:01.fsdisclosure.ascVendor Advisory
• https://security.netapp.com/advisory/ntap-20210423-0002/Third Party Advisory

Published

Mar 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2557Vulnerability in the Oracle Demantra Demand Management produ…4.7
• CVE-2020-25573An issue was discovered in the linked-hash-map crate before …9.8
• CVE-2020-25574An issue was discovered in the http crate before 0.1.20 for …7.5
• CVE-2020-25575An issue was discovered in the failure crate through 0.1.5 f…9.8
• CVE-2020-25576An issue was discovered in the rand_core crate before 0.4.2 …9.8
• CVE-2020-25577In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r3…9.8
• CVE-2020-25579In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r3…5.3
• CVE-2020-2558Vulnerability in the Oracle Solaris product of Oracle System…5.8
• CVE-2020-25580In FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r3…5.3
• CVE-2020-25581In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r3…7.5
• CVE-2020-25582In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r3…8.7
• CVE-2020-25583In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r3…9.8