Search

published date: February 22, 2005

CVE-2005-0937 : Some futex functions in...

Description

Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.

Product(s):

  • Linux Kernel 2.5.0
  • Linux Kernel 2.5.10
  • Linux Kernel 2.5.11
  • Linux Kernel 2.5.12
  • Linux Kernel 2.5.13
  • Linux Kernel 2.5.14

Question to Ask Vendors:

  1. Can you confirm whether your systems are affected by CVE-2005-0937, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-2005-0937 in your products or services, and how will you communicate updates on this issue to us as your customer?

READY TO GET RESULTS YOU CAN TRUST?