CVE-2010-0623
5.6 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.2%
The futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which allows local users to cause a denial of service (OOPS) via vectors involving an unmount of an ext3 filesystem.
References
bugzilla.kernel.org/show_bug.cgi?id=14256
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ecb01cfdf96c5f465192bdb2a4fd4a61a24c6cc
lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html
secunia.com/advisories/38922
www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7
www.mandriva.com/security/advisories?name=MDVSA-2010:088
www.openwall.com/lists/oss-security/2010/02/11/2
www.ubuntu.com/usn/USN-914-1
www.vupen.com/english/advisories/2010/0638
Social References
More
Related
5.6 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.2%