Description
By default, jailed processes cannot mount filesystems, including nullfs(4). However, the allow.mount.nullfs option enables mounting nullfs filesystems, subject to privilege checks. If a privileged user within a jail is able to nullfs-mount directories, a limitation of the kernel's path lookup logic allows that user to escape the jail's chroot, yielding access to the full filesystem of the host or parent jail. In a jail configured to allow nullfs(4) mounts from within the jail, the jailed root user can escape the jail's filesystem root.
INFO
Published Date :
2026-03-09T11:46:51.973Z
Last Modified :
2026-03-10T18:59:55.413Z
Source :
freebsd
AFFECTED PRODUCTS
The following products are affected by CVE-2025-15547 vulnerability.
| Vendors | Products |
|---|---|
| Freebsd |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-15547.
