The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.
Source: NVD ↗ · CISA KEV Catalog ↗