CVE-2009-3527

CVE-2009-3527 describes a race condition in the Pipe (IPC) close function within FreeBSD versions 6.3 and 6.4. This vulnerability allows a local attacker to trigger a denial of service (system crash) or potentially escalate privileges through a use-after-free error and subsequent NULL pointer dereference or memory corruption. With a CVSS score of 6.9, it is considered a high-severity vulnerability due to its local attack vector, medium attack complexity, and complete impact on confidentiality, integrity, and availability. While not listed on CISA KEV or the Hot List, an exploit (EDB-9859) exists, though there is no evidence of active exploitation or significant community discussion.