NetSight
IP …
medium6.9

CVE-2014-0205

The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, whi…

Impact

The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.36.4
Versions 2.6.36, 2.6.36.1, 2.6.36.2, 2.6.36.3

Weakness classification

CWE-119

References