GHSA-x8hf-49vp-fmqg

GHSA-x8hf-49vp-fmqg PUBLISHED CVSS 8.600000381469727 HIGH

Record from GitHub Advisory Database · Published May 3, 2022

The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.

Risk scores

CVSS 4.0

8.600000381469727

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Timeline

May 3, 2022 CVE Published
Apr 9, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-x8hf-49vp-fmqg
vulnetix vdb fixes GHSA-x8hf-49vp-fmqg

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-x8hf-49vp-fmqg/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →