GHSA-j9fr-8f9m-c9qc

GHSA-j9fr-8f9m-c9qc PUBLISHED CVSS 5.5 MEDIUM

Record from GitHub Advisory Database · Published May 13, 2022

The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE).

Risk scores

CVSS 3.0

5.5

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Timeline

May 13, 2022 CVE Published
Apr 9, 2026 Distribution Patch (8 in total, the first dated here)
Apr 30, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-j9fr-8f9m-c9qc
vulnetix vdb fixes GHSA-j9fr-8f9m-c9qc

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-j9fr-8f9m-c9qc/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →