Vulnerability in Linux Kernel

CVE-2006-3634

The (1) __futex_atomic_op and (2) futex_atomic_cmpxchg_inatomic functions in Linux kernel 2.6.17-rc4 to 2.6.18-rc2 perform the atomic futex operation in the kernel address space instead of the user address space, which allows local users to cause a denial of service (crash).

EPSS: 0.003 (26.2th percentile) — read the EPSS interpretation.

Affected products

References