Ubuntu
linux package

  1. Bug #1326367
  2. Comment #0

Comment 0 for bug 1326367

Revision history for this message
John Johansen (jjohansen) wrote : exploitable futex vulnerability

If uaddr == uaddr2, then we have broken the rule of only requeueing from
a non-pi futex to a pi futex with this call. If we attempt this, then
dangling pointers may be left for rt_waiter resulting in an exploitable
condition.