PT-2005-1964 · Linux+1 · Linux Kernel+1

Published 2005-02-22 · Updated 2023-02-13 · CVE-2005-0937

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.x

Description The issue is related to some futex functions in futex.c, which perform get user calls while holding the mmap sem semaphore. This could allow local users to cause a deadlock condition in do page fault by triggering get user faults while another thread is executing mmap or other functions.

Recommendations For Linux kernel version 2.6.x, consider applying a patch that fixes the deadlock condition in futex functions. As a temporary workaround, consider restricting access to futex functions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0937

RHSA-2005:420

RHSA-2005_420

Affected Products

Linux Kernel

Red Hat

References · 13

• http://redhat.com/support/errata/RHSA-2005-420.html · Vendor Advisory
• http://securityfocus.com/archive/1/427980/100/0/threaded · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0937 · Security Note
• http://lkml.org/lkml/2005/2/22/123 · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-0937.html · Note
• https://redhat.com/security/data/cve/CVE-2005-1264.html · Note
• http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html · Note
• http://linux.bkbits.net:8080/linux-2.6/cset%40421cfc11zFsK9gxvSJ2t__FCmuUd3Q · Note
• https://redhat.com/security/data/cve/CVE-2005-3107.html · Note
• https://redhat.com/security/data/cve/CVE-2005-0209.html · Note
• https://redhat.com/security/data/cve/CVE-2005-0136.html · Note
• https://rhn.redhat.com/errata/RHSA-2005-420.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10037 · Note