CVE-2012-6647 in Linux Kernel
Summary
The futex_wait_requeue_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted FUTEX_WAIT_REQUEUE_PI command.
Reservation
05/14/2014
Disclosure
05/26/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13215 | Linux Kernel futex.c futex_wait_requeue_pi input validation | 20 | Unproven | Official fix | CVE-2012-6647 |