CVE-2008-2365

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.

CVSS v2.0

4.7 MEDIUMAV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS

0.53% chance of exploitation in the next 30 days, 43th percentile

Published

2008-06-30

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/31966
• https://www.exploit-db.com/exploits/31965

References

• CVE Record
• NVD entry

Related

• CVE-2008-2356
• CVE-2008-2370
• CVE-2008-2355
• CVE-2008-2374
• CVE-2008-2353
• CVE-2008-2382