The (1) __futex_atomic_op and (2) futex_atomic_cmpxchg_inatomic functions in Linux kernel 2.6.17-rc4 to 2.6.18-rc2 perform the atomic futex operation in the kernel address space instead of the user address space, which allows local users to cause a denial of service (crash).
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | 2.3.65 |
| n/a | n/a | < 6.12.55 |