Lucene search

K
cve[email protected]CVE-2005-0937
HistoryFeb 22, 2005 - 5:00 a.m.

CVE-2005-0937

2005-02-2205:00:00
NVD-CWE-Other
web.nvd.nist.gov
21
linux
kernel
2.6.x
futex.c
vulnerability
deadlock
mmap
get_user
nvd

6.1 Medium

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%

Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.

6.1 Medium

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%