Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.
CVSS Details
- CVSS 3.1 Base Score: 2.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.8.1-5-amd64-k8Upgrade linux-image-2.6.8.1-5-686-smpUpgrade linux-image-2.6.8.1-5-power4-smpUpgrade linux-image-2.6.8.1-5-amd64-xeonUpgrade linux-image-2.6.8.1-5-amd64-k8-smpUpgrade linux-image-2.6.8.1-5-amd64-genericUpgrade linux-image-2.6.8.1-5-power3Upgrade linux-image-2.6.8.1-5-k7-smp | Nov 8, 2024 | Feb 22, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub