CVE-2014-0205

CVE-2014-0205 describes a use-after-free vulnerability in the futex_wait function of the Linux kernel, affecting versions prior to 2.6.37. This flaw stems from improper reference count maintenance during requeue operations. A local attacker can exploit this with a crafted application to trigger a system crash (denial of service) or potentially escalate privileges. The vulnerability has a CVSS score of 6.9, indicating high impact on confidentiality, integrity, and availability, with medium attack complexity and requiring local access. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.