Bug 307449

Summary:	Kernel: wake_futex_pi() DoS/? (CVE-2010-0622)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	jaak
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7
Whiteboard:	[linux < 2.6.33-rc7]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2010-03-02 09:43:51 UTC

CVE-2010-0622 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0622):
  The wake_futex_pi function in kernel/futex.c in the Linux kernel
  before 2.6.33-rc7 does not properly handle certain unlock operations
  for a Priority Inheritance (PI) futex, which allows local users to
  cause a denial of service (OOPS) and possibly have unspecified other
  impact via vectors involving modification of the futex value from
  user space.