{"id":"CVE-2005-0937","aliases":["EUVD-2005-0938","GHSA-vh58-x7x5-79rq","RHSA-2005:420"],"status":"published","title":"Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the...","description":"Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.","severity":{"version":"2.0","score":1.2,"vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00346,"percentile":0.28398,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-02-22T05:00:00Z","modified":"2026-06-26T10:03:11Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://linux.bkbits.net:8080/linux-2.6/cset%40421cfc11zFsK9gxvSJ2t__FCmuUd3Q","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lkml.org/lkml/2005/2/22/123","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10037","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-420.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/427980/100/0/threaded","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0937","tags":["advisory"]},{"url":"http://linux.bkbits.net:8080/linux-2.6/cset@421cfc11zFsK9gxvSJ2t__FCmuUd3Q"},{"url":"https://github.com/advisories/GHSA-vh58-x7x5-79rq"},{"url":"https://access.redhat.com/errata/RHSA-2005:420","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=133590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=134338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=137154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=138563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=140083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=140383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=140472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=141699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=141983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=142167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=142464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=143073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=143472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=143907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=144741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=145424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=147832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=150110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=150151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=151284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=152101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=152102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=152557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=154221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=154639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=154972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=155283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=155765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=156875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=157450","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_420.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0136","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617496","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0209","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0937","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617621","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1264","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-3107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3107","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3107","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-0937","description":"Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.","status":"published","published":"2005-03-30T05:00:00Z","modified":"2024-08-07T21:28:28.58Z","updated_at":"2026-11-02T14:33:40.245652Z"}],"euvd":[{"id":"EUVD-2005-0938","description":"Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.","status":"published","published":"2005-03-30T05:00:00Z","modified":"2024-08-07T21:28:28Z","updated_at":"2026-11-03T01:15:36.335809Z"}],"ghsa":[{"id":"GHSA-vh58-x7x5-79rq","title":"Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the...","description":"Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.","status":"published","published":"2022-05-01T01:53:12Z","modified":"2023-02-13T03:31:07Z","updated_at":"2026-11-02T14:54:05.992759Z"}],"nvd":[{"id":"CVE-2005-0937","description":"Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.","status":"published","published":"2005-02-22T05:00:00Z","modified":"2026-06-16T22:12:05.04Z","cvss":[{"version":"2.0","score":1.2,"vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:00:54.594271Z"}],"osv":[{"id":"RHSA-2005:420","title":"Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 1","status":"published","published":"2024-09-15T15:29:44Z","modified":"2026-06-26T10:03:11Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}