NetSight
IP …
medium4.4

CVE-2021-4002

A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligne…

Impact

A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.16
Version 5.16
DebianDebian Linux
Versions 9.0, 10.0
FedoraprojectFedora
Version 35
OracleCommunications Cloud Native Core Binding Support Function
Version 22.1.3
OracleCommunications Cloud Native Core Network Exposure Function
Version 22.1.1
OracleCommunications Cloud Native Core Policy
Version 22.2.0

Weakness classification

CWE-459CWE-401

References