Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Thu, 02 Oct 2008 09:22:54 +0800
From: Eugene Teo <>
Subject: CVE-2008-3832 kernel: null pointer dereference in utrace_control

Michael Simms reported that it is possible for an unprivileged user to
crash the machine by running gdb on a running process with pid 1.

This affects the version of utrace as shipped with Fedora 8 and 9. This
is addressed in kernel- for Fedora 8, and kernel-
for Fedora 9. This issue is specific to Fedora, and does not affect
upstream or any of the Red Hat Enterprise Linux kernels.


Thanks, Eugene
Eugene Teo / Red Hat Security Response Team

View attachment "patch" of type "text/plain" (608 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.