Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:18 a.m.1 views

SUSE CVE-2005-0937

Some futex functions in futex.c for Linux kernel 2.6.x perform getuser calls while holding the mmapsem semaphore, which could allow local users to cause a deadlock condition in dopagefault by triggering getuser faults while another thread is executing mmap or other functions...

1.2CVSS6.5AI score0.00063EPSS
Exploits0References3
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/25 12:0 a.m.33 views

Linux Kernel Privilege Escalation Vulnerability

The futexrequeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges...

7.8CVSS6.1AI score0.7136EPSS
In wildExploits15
NVD
NVD
added 2018/11/06 5:29 p.m.14 views

CVE-2018-9422

In getfutexkey of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstre...

7.8CVSS7.2AI score0.00056EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2018/11/06 5:29 p.m.15 views

CVE-2018-9422

In getfutexkey of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstre...

7.8CVSS7.1AI score0.00056EPSS
Exploits0References3
Cvelist
Cvelist
added 2018/11/06 5:0 p.m.18 views

CVE-2018-9422

In getfutexkey of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstre...

7.5AI score0.00056EPSS
Exploits0References4
Prion
Prion
added 2018/02/12 7:29 p.m.26 views

Integer overflow

The futexrequeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service integer overflow or possibly have unspecified other impact by triggering a negative wake or requeue value...

4.6CVSS7.5AI score0.00037EPSS
Exploits0References15Affected Software10
CVE
CVE
added 2014/09/28 7:0 p.m.116 views

CVE-2014-0205

CVE-2014-0205 affects the Linux kernel futex_wait in kernel/futex.c, where a reference-count during requeue isn’t properly maintained before 2.6.37. This enables local users to cause denial of service (use-after-free and system crash) and, in a crafted scenario, potentially gain privileges by tri...

6.9CVSS7.4AI score0.00041EPSS
Exploits1References6Affected Software1
CVE
CVE
added 2005/03/30 5:0 a.m.56 views

CVE-2005-0937

The CVE-2005-0937 issue is a Linux kernel vulnerability in futex.c (2.6.x) where get_user may be invoked while mmap_sem is held. This can lead to a deadlock in do_page_fault if another thread is executing mmap or related operations, as described in the Linux kernel advisories. Public references (...

1.2CVSS5.2AI score0.00063EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder