# CVE-2024-42416

## Summary

- **CVE ID:** CVE-2024-42416
- **Severity:** UNKNOWN
- **CVSS Score:** 0
- **CWE:** CWE-790, CWE-823
- **Published:** Sep 5, 2024
- **Last Modified:** Mar 13, 2026

## Description

The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory.

Malicious software running in a guest VM that exposes virtio_scsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which typically runs as root.  Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve process.  A malicious iSCSI initiator could achieve remote code execution on the iSCSI target host.

## Affected Products

- FreeBSD — FreeBSD (14.1-RELEASE)
- FreeBSD — FreeBSD (14.0-RELEASE)
- FreeBSD — FreeBSD (13.3-RELEASE)

## References

- [CNA](https://security.freebsd.org/advisories/FreeBSD-SA-24:11.ctl.asc)
- [CVE](https://security.netapp.com/advisory/ntap-20240920-0010/)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.40%
- **EPSS Percentile:** 33.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._