{"id":"CVE-2014-0205","aliases":["DEBIAN-CVE-2014-0205","EUVD-2014-0255","GHSA-cwrh-45v3-q8mf","RHSA-2014:1167","RHSA-2014:1365","RHSA-2014:1763","UBUNTU-CVE-2014-0205"],"status":"published","title":"The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly...","description":"The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00661,"percentile":0.51916,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2014-09-28T00:00:00Z","modified":"2026-10-23T15:47:36Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["2.6.37"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["2.6.37"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["2.6.37"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-debug","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-debug-debuginfo","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-debug-devel","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-debuginfo","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-debuginfo-common-x86_64","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-devel","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-doc","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-firmware","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-headers","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"perf","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"perf-debuginfo","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"python-perf-debuginfo","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"python-perf","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-bootwrapper","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debug","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debug-debuginfo","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debug-devel","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debuginfo","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debuginfo-common-i686","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debuginfo-common-ppc64","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debuginfo-common-s390x","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debuginfo-common-x86_64","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-devel","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-doc","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-firmware","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-headers","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-kdump","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-kdump-debuginfo","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-kdump-devel","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"perf","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"perf-debuginfo","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"python-perf-debuginfo","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"python-perf","fixed_in":["0:2.6.32-358.49.1.el6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.37"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.37"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.37"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-431.29.2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-358.49.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.56.1.el6"}]}],"bundled":2}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2014-1365.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://github.com/torvalds/linux/commit/7ada876a8703f23befbb20a7465a702ee39b1704","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ada876a8703f23befbb20a7465a702ee39b1704","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1763.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.37","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Vendor Advisory","advisory","evidence"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094455","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0205","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7ada876a8703f23befbb20a7465a702ee39b1704"},{"url":"https://access.redhat.com/errata/RHSA-2014:1167","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1365","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1763","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0205","tags":["report"]},{"url":"https://github.com/advisories/GHSA-cwrh-45v3-q8mf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-0205","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.5_Technical_Notes/kernel.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1102571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114540","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1167.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0205","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3535","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3535","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3917","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3917","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3917","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4667","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4667","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4667","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1365.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1122982","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1763.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-5077","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-5077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5077","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-0205","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2014-1167.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-1041-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-0205","description":"The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.","status":"published","published":"2014-09-28T19:00:00Z","modified":"2024-08-06T09:05:39.238Z","updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0255","description":"The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.","status":"published","published":"2014-09-28T19:00:00Z","modified":"2024-08-06T09:05:39Z","updated_at":"2026-11-03T01:57:22.035163Z"}],"ghsa":[{"id":"GHSA-cwrh-45v3-q8mf","title":"The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly...","description":"The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.","status":"published","published":"2022-05-17T04:21:32Z","modified":"2023-02-10T05:07:18Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:54:03.896291Z"}],"nvd":[{"id":"CVE-2014-0205","description":"The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.","status":"published","published":"2014-09-28T19:55:05.55Z","modified":"2026-06-17T00:02:30.763Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:55.884979Z"}],"osv":[{"id":"CVE-2014-0205","description":"The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.","status":"published","published":"2014-09-28T19:55:05Z","modified":"2026-04-10T03:44:37.268915Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-0205","description":"The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.","status":"published","published":"2014-09-28T19:55:05.55Z","modified":"2026-10-23T15:47:36.720036194Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"RHSA-2014:1167","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-15T21:53:46Z","modified":"2026-06-28T10:11:20Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1365","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-15T21:53:51Z","modified":"2026-06-28T10:11:37Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1763","title":"Red Hat Security Advisory: kernel security update","status":"published","published":"2024-09-15T21:53:40Z","modified":"2026-06-28T10:11:55Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"UBUNTU-CVE-2014-0205","description":"The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.","status":"withdrawn","published":"2014-09-28T00:00:00Z","modified":"2026-02-04T03:54:31.136803Z","updated_at":"2026-11-02T15:54:07.855521Z"}]}}