CVE-2008-3832

Description

A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-45 on Fedora 9, allows local users to cause a denial of service (NULL pointer dereference and system crash or hang) via a call to the utrace_control function.

Affected products

• redhat / fedora8 – 8
• redhat / fedora9 – 9

Exploits & proofs of concept

• exploit-dbLinux Kernel (Fedora 8/9) - 'utrace_control' Null Pointer Dereference Denial of Serviceby Michael Simms

References

• MISChttp://www.securityfocus.com/bid/31536
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2008/10/02/1
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/45644
• MISChttp://kerneloops.org/oops.php?number=56705
• MISChttps://bugzilla.redhat.com/show_bug.cgi?id=464883