The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade python-perfUpgrade kernel | Dec 1, 2016 | Sep 28, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 28, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 17, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Sep 28, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.32-27-386 | Nov 8, 2024 | Sep 28, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub