VDB
GHSA-vww9-mp9g-8qvc
GHSA-vww9-mp9g-8qvc
PUBLISHED
CVSS 5.599999904632568 MEDIUM
Record from GitHub Advisory Database · Published May 24, 2022
A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
Risk scores
CVSS 3.1
5.599999904632568
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Timeline
- May 24, 2022 CVE Published
- Apr 9, 2026 Distribution Patch
- Apr 9, 2026 Security Advisory (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-vww9-mp9g-8qvc
vulnetix vdb fixes GHSA-vww9-mp9g-8qvcOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-vww9-mp9g-8qvc/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2019-15902 advisory
- https://security.netapp.com/advisory/ntap-20191004-0001 url
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html url
- https://grsecurity.net/teardown_of_a_failed_linux_lts_spectre_fix.php url
- https://seclists.org/bugtraq/2019/Sep/41 url
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html url
- https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html advisory
- https://usn.ubuntu.com/4157-2 advisory
- https://usn.ubuntu.com/4162-1 advisory
- https://usn.ubuntu.com/4157-1 advisory
- https://usn.ubuntu.com/4162-2 advisory
- https://usn.ubuntu.com/4163-1 advisory
- https://usn.ubuntu.com/4163-2 advisory
- https://www.debian.org/security/2019/dsa-4531 advisory