The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresse

Summary

The Linux kernel's futex subsystem (kernel/futex.c) is affected. A local user with access to the system could exploit it to gain elevated privileges.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Timeline

1. Jun 7, 2014, 2:00 PM UTCCVE published
2. May 25, 2022Added to CISA KEV

   CISA has evidence of exploitation in the wild

3. Jun 15, 2022CISA remediation deadline

   Due date for US federal agencies to patch

4. Oct 22, 2025, 12:05 AM UTCRecord last updated
5. Oct 22, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• n/a n/a

  Version range not reported

References 25