CVE-2008-2365
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used...
4.7 MediumPublic exploit
CVE-2008-2365 is a medium vulnerability (CVSS 4.7) in Linux Kernel, published June 30, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 45th percentile. No source names a fixed version.
- Severity
- 4.7 MediumCVSS 2.0, NVD
- Exploit chance
- 0.53%EPSS, 45th percentile
- Exploitation
- None known2 public exploits
- Fixed in
- No fix listedNo source names one
Description
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
Exploit likelihood
0.53%Down 2.7 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
Show 71 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.6.18-92.el5 | 0:2.6.18-92.el5 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenURed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenURed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenURed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.9-67.0.20.EL | 0:2.6.9-67.0.20.EL |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (1) | 2008-06-25 |
| Exploit-DB | Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (2) | 2008-06-25 |
What each source reports
NVD Score used
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
- Record
CVE-2008-2365- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE ListNo score
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
- Record
CVE-2008-2365- Updated
- 2026-11-02
EUVDEUVD-2008-2361No score
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
- Record
EUVD-2008-2361- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rv47-5vwq-v454No score
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used...
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
- Record
GHSA-rv47-5vwq-v454- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVBELL-CVE-2008-2365
CVE-2008-2365 does not affect BellSoft software
- Record
BELL-CVE-2008-2365- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/43567
git.kernel.org?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f5b40e363ad6041a96e3da32281d8faa191597b9
securitytracker.com/id?1020362
sources.redhat.com/cgi-bin/cvsweb.cgi/~checkout~/tests/ptrace-tests/tests/late-ptrace-may-attach-check.c?cvsroot=systemtap
securityfocus.com/bid/29945
Show 194 moreShow less
openwall.com/lists/oss-security/2008/07/14/1
securityreason.com/securityalert/3965
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10749
secunia.com/advisories/30850
bugzilla.redhat.com/show_bug.cgi?id=449359
ubuntu.com/usn/usn-625-1
rhn.redhat.com/errata/RHSA-2008-0508.html
marc.info?l=linux-kernel&m=117863520707703&w=2
nvd.nist.gov/vuln/detail/CVE-2008-2365
github.com/advisories/GHSA-rv47-5vwq-v454
docs.bell-sw.com/security/cves/CVE-2008-2365
access.redhat.com/errata/RHBA-2008:0314
security.access.redhat.com/data/csaf/v2/advisories/2008/rhba-2008_0314.json
cve.org/CVERecord?id=CVE-2007-5906
redhat.com/security/updates/classification
This page doesn't list everything
Left out here: 78 references. The JSON record has them.