CVE-2008-2365

N/A Unknown
Published: June 30, 2008 Modified: April 23, 2026
View on NVD

Description

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=5ecfbae093f0c37311e89b29bfc0c9d586eace87
Source: secalert@redhat.com
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f358166a9405e4f1d8e50d8f415c26d95505b6de
Source: secalert@redhat.com
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f5b40e363ad6041a96e3da32281d8faa191597b9
Source: secalert@redhat.com
http://marc.info/?l=linux-kernel&m=117863520707703&w=2
Source: secalert@redhat.com
http://rhn.redhat.com/errata/RHSA-2008-0508.html
Source: secalert@redhat.com
Patch
http://secunia.com/advisories/30850
Source: secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/31107
Source: secalert@redhat.com
Vendor Advisory
http://securityreason.com/securityalert/3965
Source: secalert@redhat.com
http://sources.redhat.com/cgi-bin/cvsweb.cgi/~checkout~/tests/ptrace-tests/tests/late-ptrace-may-attach-check.c?cvsroot=systemtap
Source: secalert@redhat.com
http://www.openwall.com/lists/oss-security/2008/06/26/1
Source: secalert@redhat.com
Patch
http://www.openwall.com/lists/oss-security/2008/07/14/1
Source: secalert@redhat.com
http://www.securityfocus.com/bid/29945
Source: secalert@redhat.com
http://www.securitytracker.com/id?1020362
Source: secalert@redhat.com
http://www.ubuntu.com/usn/usn-625-1
Source: secalert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=449359
Source: secalert@redhat.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43567
Source: secalert@redhat.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10749
Source: secalert@redhat.com
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=5ecfbae093f0c37311e89b29bfc0c9d586eace87
Source: af854a3a-2127-422b-91ae-364da2661108
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f358166a9405e4f1d8e50d8f415c26d95505b6de
Source: af854a3a-2127-422b-91ae-364da2661108
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f5b40e363ad6041a96e3da32281d8faa191597b9
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=linux-kernel&m=117863520707703&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://rhn.redhat.com/errata/RHSA-2008-0508.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://secunia.com/advisories/30850
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/31107
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://securityreason.com/securityalert/3965
Source: af854a3a-2127-422b-91ae-364da2661108
http://sources.redhat.com/cgi-bin/cvsweb.cgi/~checkout~/tests/ptrace-tests/tests/late-ptrace-may-attach-check.c?cvsroot=systemtap
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.openwall.com/lists/oss-security/2008/06/26/1
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.openwall.com/lists/oss-security/2008/07/14/1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/29945
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1020362
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/usn-625-1
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.redhat.com/show_bug.cgi?id=449359
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/43567
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10749
Source: af854a3a-2127-422b-91ae-364da2661108

34 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.7%
72th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-362

Affected Vendors

redhat linux

Related CVEs

CVE-2026-6951 9.8
CVE-2026-6175 N/A
CVE-2026-42171 7.8
CVE-2026-41488 3.1
CVE-2026-41481 6.5