CVE-2009-1388

Published: Jul 5, 2009Modified: Apr 23, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via vectors involving the ptrace system call and a coredumping thread.

Affected (1)

Products: Linux: Linux Kernel

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.18

Related CWEs

Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

References (28)

http://marc.info/?l=oss-security&m=124654277229434&w=2

Source: secalert@redhat.com

Mailing ListPatch

http://osvdb.org/55679

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/36131

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/37471

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2009-1193.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/35559

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: secalert@redhat.com

Broken Link

https://bugzilla.redhat.com/attachment.cgi?id=346615

Source: secalert@redhat.com

Mailing ListPatch

https://bugzilla.redhat.com/attachment.cgi?id=346742

Source: secalert@redhat.com

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=504263

Source: secalert@redhat.com

Issue TrackingPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8625

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8680

Source: secalert@redhat.com

Broken Link

http://marc.info/?l=oss-security&m=124654277229434&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

http://osvdb.org/55679

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/36131

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/37471

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.redhat.com/support/errata/RHSA-2009-1193.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/35559

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://bugzilla.redhat.com/attachment.cgi?id=346615

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://bugzilla.redhat.com/attachment.cgi?id=346742

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=504263

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8625

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8680

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.