PT-2005-1964 · Linux+1 · Linux Kernel+1

CVE-2005-0937

·

Publicado

2005-02-22

·

Atualizado

2023-02-13

CVSS v2.0

1.2

Baixa

VetorAV:L/AC:H/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.x
Description The issue is related to some futex functions in futex.c, which perform get user calls while holding the mmap sem semaphore. This could allow local users to cause a deadlock condition in do page fault by triggering get user faults while another thread is executing mmap or other functions.
Recommendations For Linux kernel version 2.6.x, consider applying a patch that fixes the deadlock condition in futex functions. As a temporary workaround, consider restricting access to futex functions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2005-0937
RHSA-2005:420
RHSA-2005_420

Produtos afetados

Linux Kernel
Red Hat