The futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which allows local users to cause a denial of service (OOPS) via vectors involving an unmount of an ext3 filesystem.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Linux_kernel | Linux | * | 2.6.33 (excluding) |
Linux_kernel | Linux | 2.6.33 (including) | 2.6.33 (including) |
Linux_kernel | Linux | 2.6.33-rc1 (including) | 2.6.33-rc1 (including) |
Linux_kernel | Linux | 2.6.33-rc2 (including) | 2.6.33-rc2 (including) |
Linux_kernel | Linux | 2.6.33-rc3 (including) | 2.6.33-rc3 (including) |
Linux_kernel | Linux | 2.6.33-rc4 (including) | 2.6.33-rc4 (including) |
Linux_kernel | Linux | 2.6.33-rc5 (including) | 2.6.33-rc5 (including) |
Linux_kernel | Linux | 2.6.33-rc6 (including) | 2.6.33-rc6 (including) |
Linux | Ubuntu | karmic | * |
Linux | Ubuntu | upstream | * |
Linux-source-2.6.15 | Ubuntu | upstream | * |