Denial Of Service (DoS)

2020-04-1000:45:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

JSON

kernel is vulnerable to denial of service (DoS). The vulnerability exists as a NULL pointer dereference flaw was found in the Fast Userspace Mutexes (futexes) implementation. The unlock code path did not check if the futex value associated with pi_state->owner had been modified. A local user could use this flaw to modify the futex value, possibly leading to a denial of service or privilege escalation when the pi_state->owner pointer is dereferenced.

CPENameOperatorVersion
kernel-rteq2.6.24.7__111.el5rt
kernel-rteq2.6.24.7__139.el5rt
kernel-rteq2.6.24.7__81.el5rt
kernel-rteq2.6.24.7__146.el5rt
kernel-rteq2.6.24.7__117.el5rt
kernel-rteq2.6.24.7__137.el5rt
kernel-rteq2.6.24.7__132.el5rt
kernel-rteq2.6.24.7__101.el5rt
kernel-rteq2.6.24.7__108.el5rt
kernel-rteq2.6.24.7__93.el5rt

Name	Operator	Version
kernel-rt	eq	2.6.24.7__111.el5rt
kernel-rt	eq	2.6.24.7__139.el5rt
kernel-rt	eq	2.6.24.7__81.el5rt
kernel-rt	eq	2.6.24.7__146.el5rt
kernel-rt	eq	2.6.24.7__117.el5rt
kernel-rt	eq	2.6.24.7__137.el5rt
kernel-rt	eq	2.6.24.7__132.el5rt
kernel-rt	eq	2.6.24.7__101.el5rt
kernel-rt	eq	2.6.24.7__108.el5rt
kernel-rt	eq	2.6.24.7__93.el5rt