Description
The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance (PI) futex, which allows local users to cause a denial of service (OOPS) and possibly have unspecified other impact via vectors involving modification of the futex value from user space.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-21lenny4 | DSA-2012-1 |
| Debian 4.0 | linux-2.6 | 2.6.18.dfsg.1-26etch2 | DSA-2003-1 |
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.9etch3 | DSA-2005-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +11 | 2.6.18-194.8.1.el5 | RHSA-2010:0504 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 1 | kernel-rt +9 | 2.6.24.7-149.el5rt | RHSA-2010:0161 |
Advisories 5
- RHSA-2010:0504 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2010:0161 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-2012-1 linux-2.6 - several issues Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2003-1 linux-2.6 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2005-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- USN-914-1 vendor-advisory
- 38905 third-party-advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7
- [oss-security] 20100209 CVE request - kernel: futex: Handle user space corruption gracefully mailing-list
- ADV-2010-0638 vdb-entry
- FEDORA-2010-1804 vendor-advisory
- MDVSA-2010:198 vendor-advisory
- 38779 third-party-advisory
- MDVSA-2010:088 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=563091
- SUSE-SA:2010:014 vendor-advisory
- 38922 third-party-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=51246bfd189064079c54421507236fd2723b18f3
- SUSE-SA:2010:018 vendor-advisory
- 43315 third-party-advisory
- oval:org.mitre.oval:def:9655 vdb-entry signature
- 39033 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- [oss-security] 20100211 Re: CVE request - kernel: futex: Handle user space corruption gracefully mailing-list
- DSA-2005 vendor-advisory
- 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX mailing-list
- RHSA-2010:0161 vendor-advisory