Published: 30 September 2010
kernel/trace/ftrace.c in the Linux kernel before 126.96.36.199, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service (NULL pointer dereference and outage of all function tracing files) via an lseek call on a file descriptor associated with the set_ftrace_filter file.
From the Ubuntu security team
Robert Swiecki discovered that ftrace did not correctly handle mutexes. A local attacker could exploit this to crash the kernel, leading to a denial of service.
CVSS 3 base score: 5.5