Vulnerability Details : CVE-2021-4002

A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.
Vulnerability category: Bypass
Published 2022-03-03 22:15:09
Updated 2023-02-22 17:46:53
Source Red Hat, Inc.
View at NVD,   CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2021-4002

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 8 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2021-4002

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Source
3.6
 LOW AV:L/AC:L/Au:N/C:P/I:P/A:N
3.9
4.9
 nvd@nist.gov
4.4
 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1.8
2.5
 nvd@nist.gov

CWE ids for CVE-2021-4002

References for CVE-2021-4002

Products affected by CVE-2021-4002

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close