MNBSD-2021-6: Linux compatibility layer futex(2) denial of service

Description

A programming error in the Linux compatibility layer futex(2) system call, where an unprivileged local attacker could specify a negative wake or requeue value causing a signed integer overflow, might allow attackers to cause a denial of service. Systems not using the Linux binary compatibility layer are not affected.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.cve.org/CVERecord?id=CVE-2018-6927
• https://www.freebsd.org/security/advisories/FreeBSD-EN-21:22.linux_futex.asc

Additional Information

Aliases: CVE-2018-6927

Published: June 29, 2021
Last Modified: June 29, 2021