The futex_wait_requeue_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted FUTEX_WAIT_REQUEUE_PI command.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade perf | Dec 1, 2016 | May 26, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 26, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | May 26, 2014 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade ext4dev-kmp-defaultUpgrade kernel-sourceUpgrade btrfs-kmp-paeUpgrade ext4dev-kmp-paeUpgrade kernel-pae-baseUpgrade hyper-v-kmp-traceUpgrade ext4dev-kmp-traceUpgrade kernel-traceUpgrade kernel-xen-baseUpgrade ext4dev-kmp-xenUpgrade kernel-ec2-baseUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-paeUpgrade xen-kmp-paeUpgrade xen-kmp-traceUpgrade hyper-v-kmp-paeUpgrade kernel-ec2Upgrade kernel-default-baseUpgrade kernel-pae-develUpgrade btrfs-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade btrfs-kmp-xenUpgrade hyper-v-kmp-defaultUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-ec2-devel | Feb 17, 2015 | May 15, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-31-powerpc-smpUpgrade linux-image-2.6.32-45-sparc64-smpUpgrade linux-image-2.6.32-45-powerpcUpgrade linux-image-3.2.0-1419-omap4Upgrade linux-image-2.6.32-45-genericUpgrade linux-image-2.6.32-45-generic-paeUpgrade linux-image-3.2.0-31-genericUpgrade linux-image-2.6.32-45-386Upgrade linux-image-2.6.32-45-virtualUpgrade linux-image-3.2.0-31-highbankUpgrade linux-image-2.6.32-45-ia64Upgrade linux-image-2.6.32-45-versatileUpgrade linux-image-2.6.32-45-lpiaUpgrade linux-image-3.2.0-31-virtualUpgrade linux-image-2.6.32-350-ec2Upgrade linux-image-3.2.0-31-powerpc64-smpUpgrade linux-image-3.2.0-31-generic-paeUpgrade linux-image-2.6.32-45-powerpc-smpUpgrade linux-image-2.6.32-45-serverUpgrade linux-image-2.6.32-45-preemptUpgrade linux-image-2.6.32-45-sparc64Upgrade linux-image-2.6.32-45-powerpc64-smpUpgrade linux-image-3.2.0-31-omap | Nov 8, 2024 | May 26, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub