VDB
GHSA-7jmv-5cqq-75jg
GHSA-7jmv-5cqq-75jg
PUBLISHED
CVSS 4.400000095367432 MEDIUM
Record from GitHub Advisory Database · Published March 4, 2022
A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.
Risk scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Timeline
- Mar 4, 2022 CVE Published
- Apr 9, 2026 Security Advisory
- Apr 29, 2026 Distribution Patch
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-7jmv-5cqq-75jg
vulnetix vdb fixes GHSA-7jmv-5cqq-75jg
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-7jmv-5cqq-75jg/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-4002 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2025726 url
- https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html url
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html url
- https://www.openwall.com/lists/oss-security/2021/11/25/1 url
- https://www.oracle.com/security-alerts/cpujul2022.html url
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13e4ad2ce8df6e058ef482a31fdd81c725b0f7ea url
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4a118f2eead1d6c49e00765de89878288d4b890 url
- https://www.debian.org/security/2022/dsa-5096 url