Total vulnerabilities in the database
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
| Software | From | Fixed in |
|---|---|---|
| redhat / enterprise_linux_server_aus | 6.2 | 6.2.x |
| suse / linux_enterprise_desktop | 11-sp3 | 11-sp3.x |
| suse / linux_enterprise_server | 11-sp3 | 11-sp3.x |
| suse / linux_enterprise_real_time_extension | 11-sp3 | 11-sp3.x |
| opensuse / opensuse | 11.4 | 11.4.x |
| suse / linux_enterprise_server | 11-sp2 | 11-sp2.x |
| suse / linux_enterprise_server | 11 | 11.x |
| suse / linux_enterprise_high_availability_extension | 11-sp3 | 11-sp3.x |
| linux / linux_kernel | 3.3 | 3.4.92 |
| linux / linux_kernel | 3.5 | 3.10.42 |
| linux / linux_kernel | 3.13 | 3.14.6 |
| linux / linux_kernel | 3.11 | 3.12.22 |
| linux / linux_kernel | - | 3.2.60 |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| oracle / linux | 5 | 5.x |
| oracle / linux | 6 | 6.x |