CVEvulnerability

CVE-2021-4002

4.4 MEDIUM Published 2022-03-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-401, CWE-459

Description

A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.

Affected configurations

• linux linux kernel (< 5.16) • linux linux kernel 5.16 • debian debian linux 9.0 • debian debian linux 10.0 • fedoraproject fedora 35 • oracle communications cloud native core binding support function 22.1.3 • oracle communications cloud native core network exposure function 22.1.1 • oracle communications cloud native core policy 22.2.0

Related

Weakness · CWE (2)

  • CWE-401 Missing Release of Memory after Effective Lifetime weakness
  • CWE-459 Incomplete Cleanup weakness

References