CVE-2008-2365
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used...
4.7 MediumPublic exploitFix available
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
Exploit likelihood
0.53%Down 2.7 points since Feb 4, 2022
What each source reports
NVD Score used
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
- Record
CVE-2008-2365- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
- Record
CVE-2008-2365- Updated
- 2026-11-02
EUVDEUVD-2008-2361 No score
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
- Record
EUVD-2008-2361- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rv47-5vwq-v454 No score
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used...
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
- Record
GHSA-rv47-5vwq-v454- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVBELL-CVE-2008-2365
CVE-2008-2365 does not affect BellSoft software
- Record
BELL-CVE-2008-2365- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAERed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debugRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
Show 71 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-docRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-headersRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xenRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernelRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAERed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debugRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-docRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-headersRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xenRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernelRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-docRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugememRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenURed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernelRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-docRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernelRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-docRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugememRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenURed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernelRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-docRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenURed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (1) | 2008-06-25 |
| Exploit-DB | Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (2) | 2008-06-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2365 is a medium vulnerability (CVSS 4.7) in Linux Kernel, published June 30, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 44th percentile. Fixed in kernel 0:2.6.18-92.el5.
References
exchange.xforce.ibmcloud.com/vulnerabilities/43567
git.kernel.org?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f5b40e363ad6041a96e3da32281d8faa191597b9
securitytracker.com/id?1020362
sources.redhat.com/cgi-bin/cvsweb.cgi/~checkout~/tests/ptrace-tests/tests/late-ptrace-may-attach-check.c?cvsroot=systemtap
securityfocus.com/bid/29945
Show 194 moreShow less
openwall.com/lists/oss-security/2008/07/14/1
securityreason.com/securityalert/3965
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10749
secunia.com/advisories/30850
bugzilla.redhat.com/show_bug.cgi?id=449359
ubuntu.com/usn/usn-625-1
rhn.redhat.com/errata/RHSA-2008-0508.html
marc.info?l=linux-kernel&m=117863520707703&w=2
nvd.nist.gov/vuln/detail/CVE-2008-2365
github.com/advisories/GHSA-rv47-5vwq-v454
docs.bell-sw.com/security/cves/CVE-2008-2365
access.redhat.com/errata/RHBA-2008:0314
security.access.redhat.com/data/csaf/v2/advisories/2008/rhba-2008_0314.json
cve.org/CVERecord?id=CVE-2007-5906
redhat.com/security/updates/classification
This page doesn't list everything
Left out here: 78 references. The JSON record has them.