CVE-2021-4002

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-459CWE-401

Affected software

VendorProductVersions
n/akernelaffects kernel v3.6 and later through v5.15.5.

References

Timeline

Published
Mar 3, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-400207.5There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerabilCVE-2021-400217.5The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentialityCVE-2021-400227.5The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentCVE-2021-400237.5Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.CVE-2021-400247.5Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability mayCVE-2021-400257.5The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerabilityCVE-2021-400267.5There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affeCVE-2021-400277.5The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confCVE-2021-400287.5The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity.CVE-2021-400297.5There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. SuccessCVE-2021-400307.5The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-400317.5There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may aff
CVE-2021-4002: Medium severity, CVSS 4.4 | Vulnix