CVE-2010-0623: Medium severity Linux Linux kernel vulnerability
Published Feb 15, 2010
·Updated
The futexlockpi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which allows local users to cause a denial of service (OOPS) via vectors involving an unmount of an ext3 filesystem.
Affected Software
14 affected components
Linux Linux kernel=2.6.33-rc6
Linux Linux kernel=2.6.33-rc1
Linux Linux kernel=2.6.33-rc2
Linux Linux kernel=2.6.33-rc3
Linux Linux kernel=2.6.33-rc4
Linux Linux kernel=2.6.33-rc5
Linux Linux kernel<2.6.33
Linux Linux kernel=2.6.33
openSUSE openSUSE=11.2
Canonical Ubuntu Linux=9.04
Canonical Ubuntu Linux=8.10
Canonical Ubuntu Linux=9.10
Canonical Ubuntu Linux=8.04
Canonical Ubuntu Linux=6.06
Remediation
Patch Available
Event History
Feb 15, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0623?
CVE-2010-0623 has been classified as a high-severity vulnerability that can lead to a denial of service.
2
How do I fix CVE-2010-0623?
To fix CVE-2010-0623, upgrade the Linux kernel to version 2.6.33 or later.
3
Which versions are affected by CVE-2010-0623?
CVE-2010-0623 affects Linux kernel versions prior to 2.6.33 and specific release candidates of 2.6.33.
4
What type of attack does CVE-2010-0623 enable?
CVE-2010-0623 enables local users to cause a denial of service that results in kernel crashes.
5
Is CVE-2010-0623 present in all distributions of Linux?
CVE-2010-0623 is present in various Linux distributions that use the affected kernel versions, including Ubuntu and openSUSE.