Race condition in run_posix_cpu_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service (BUG_ON crash) by causing one CPU to attach a timer to a process that is exiting.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 171ac4b495f9473bc134356a00095b47e6409e52 |
| n/a | n/a | <= <= 3.0.7 |