CVE-2010-0623

The futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which allows local users to cause a denial of service (OOPS) via vectors involving an unmount of an ext3 filesystem.

• http://bugzilla.kernel.org/show_bug.cgi?id=14256Issue Tracking, Patch, Vendor Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ecb01cfdf96c5f465192bdb2a4fd4a61a24c6cc
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/38922Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:088Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/02/11/2Mailing List, Third Party Advisory
• http://www.ubuntu.com/usn/USN-914-1Third Party Advisory
• http://www.vupen.com/english/advisories/2010/0638Third Party Advisory
• http://bugzilla.kernel.org/show_bug.cgi?id=14256Issue Tracking, Patch, Vendor Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ecb01cfdf96c5f465192bdb2a4fd4a61a24c6cc
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/38922Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:088Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/02/11/2Mailing List, Third Party Advisory
• http://www.ubuntu.com/usn/USN-914-1Third Party Advisory
• http://www.vupen.com/english/advisories/2010/0638Third Party Advisory

Published

Feb 15, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0616evalSMSI 2.1.03 stores passwords in cleartext in the databas…
• CVE-2010-0617Cross-site scripting (XSS) vulnerability in ajax.php in eval…
• CVE-2010-0618The flood-protection feature in the base, IPDS DLE, Forms DL…
• CVE-2010-0619Stack-based buffer overflow in the base, IPDS DLE, Forms DLE…
• CVE-2010-0620Directory traversal vulnerability in the SSL Service in EMC …
• CVE-2010-0622The wake_futex_pi function in kernel/futex.c in the Linux ke…
• CVE-2010-0624Heap-based buffer overflow in the rmt_read__ function in lib…
• CVE-2010-0625Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in …
• CVE-2010-0628The spnego_gss_accept_sec_context function in lib/gssapi/spn…
• CVE-2010-0629Use-after-free vulnerability in kadmin/server/server_stubs.c…6.5
• CVE-2010-0630SQL injection vulnerability in viewjokes.php in Evernew Free…
• CVE-2010-0631Multiple SQL injection vulnerabilities in index.php in Eicra…