CVE-2009-1388

MEDIUM

Linux Kernel 2.6.18 - Denial of Service via ptrace and do_coredump Deadlock

Title source: llm
STIX 2.1

Description

The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via vectors involving the ptrace system call and a coredumping thread.

References (14)

Core 14
Core References
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36131
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37471
Third Party Advisory x_refsource_confirm
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-1193.html
Broken Link, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/507985/100/0/threaded
Mailing List, Patch x_refsource_confirm
https://bugzilla.redhat.com/attachment.cgi?id=346615
Issue Tracking, Patch x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=504263
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/55679
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35559
Mailing List, Patch mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=124654277229434&w=2
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3316

Scores

CVSS v3 5.5
EPSS 0.0036
EPSS Percentile 28.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-667
Status published
Products (1)
linux/linux_kernel 2.6.18
Published Jul 05, 2009
Tracked Since Feb 18, 2026