CVE-2008-2365
Linux kernel 2.6.9-2.6.25 - Denial of Service via PTRACE_ATTACH Race Condition
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-2365. PoCs published by Alexei Dobryanov.
AI-analyzed exploit summary This exploit leverages a race condition in the Linux kernel's ptrace system call to trigger a local denial-of-service (DoS). It repeatedly attaches and detaches to a child process, causing the kernel to become unresponsive.
Description
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
Exploits (2)
This exploit leverages a race condition in the Linux kernel's ptrace system call to trigger a local denial-of-service (DoS). It repeatedly attaches and detaches to a child process, causing the kernel to become unresponsive.
This exploit leverages a race condition in the Linux kernel by repeatedly attaching to a target process via ptrace, causing a local denial-of-service (DoS). The vulnerability arises from improper handling of the PTRACE_ATTACH request.