CVE-2008-3832

A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora...

4.9 MediumPublic exploit

A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-45 on Fedora 9, allows local users to cause a denial of service (NULL pointer dereference and system crash or hang) via a call to the utrace_control function.

Exploit likelihood

0.78%Down 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 4.9

Record: CVE-2008-3832
CVSS 2.0: 4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-3832
Updated: 2026-11-02

EUVDEUVD-2008-3818 No score

Record: EUVD-2008-3818
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7cqv-rq93-98pp No score

A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora...

Record: GHSA-7cqv-rq93-98pp
Updated: 2026-11-02

Affected products

redhat fedora

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Linux Kernel (Fedora 8/9) - 'utrace_control' Null Pointer Dereference Denial of Service	2008-10-02

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-3832 is a medium vulnerability (CVSS 4.9) in Redhat Fedora, published October 3, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 56th percentile. No source names a fixed version.