The (1) __futex_atomic_op and (2) futex_atomic_cmpxchg_inatomic functions in Linux kernel 2.6.17-rc4 to 2.6.18-rc2 perform the atomic futex operation in the kernel address space instead of the user address space, which allows local users to cause a denial of service (crash).
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | 2.6.17-rc4 (including) | 2.6.17-rc4 (including) |
| Linux_kernel | Linux | 2.6.17-rc5 (including) | 2.6.17-rc5 (including) |
| Linux_kernel | Linux | 2.6.17-rc6 (including) | 2.6.17-rc6 (including) |
| Linux_kernel | Linux | 2.6.18-rc1 (including) | 2.6.18-rc1 (including) |
| Linux_kernel | Linux | 2.6.18-rc2 (including) | 2.6.18-rc2 (including) |