A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on…
Priority LOW 24CWE-399Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.
Summary
A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-45 on Fedora 9, allows local users to cause a denial of service (NULL pointer dereference and system crash or hang) via a call to the utrace_control function.
Why it matters now
EPSS 0.00782 56th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 68
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:* | 8 | Vulnerable | Red Hat |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | up to 2.6.26.4 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:* | 2.2.27 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:* | 2.4.36 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:* | 2.4.36.1 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:* | 2.4.36.2 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:* | 2.4.36.3 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:* | 2.4.36.4 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:* | 2.4.36.5 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:* | 2.4.36.6 | Running on | Linux |
- cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:* Versions 8 Vulnerable ·Red Hat
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions up to 2.6.26.4 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:* Versions 2.2.27 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:* Versions 2.4.36 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:* Versions 2.4.36.1 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:* Versions 2.4.36.2 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:* Versions 2.4.36.3 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:* Versions 2.4.36.4 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:* Versions 2.4.36.5 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:* Versions 2.4.36.6 Running on ·Linux
Show 58 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:* | 2.6 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:* | 2.6.18 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:* | 2.6.18 rc1 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:* | 2.6.18 rc2 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:* | 2.6.18 rc3 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:* | 2.6.18 rc4 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:* | 2.6.18 rc5 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:* | 2.6.18 rc6 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:* | 2.6.18 rc7 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:* | 2.6.19.4 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:* | 2.6.19.5 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:* | 2.6.19.6 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:* | 2.6.19.7 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:* | 2.6.20.16 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:* | 2.6.20.17 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:* | 2.6.20.18 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:* | 2.6.20.19 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:* | 2.6.20.20 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:* | 2.6.20.21 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:* | 2.6.21.5 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:* | 2.6.21.6 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:* | 2.6.21.7 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:* | 2.6.22 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:* | 2.6.22.1 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:* | 2.6.22.2 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:* | 2.6.22.8 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:* | 2.6.22.9 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:* | 2.6.22.10 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:* | 2.6.22.11 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:* | 2.6.22.12 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:* | 2.6.22.13 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:* | 2.6.22.14 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:* | 2.6.22.15 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:* | 2.6.22.17 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:* | 2.6.22.18 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:* | 2.6.22.19 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:* | 2.6.22.20 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:* | 2.6.22.21 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:* | 2.6.22.22 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:* | 2.6.22_rc1 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:* | 2.6.22_rc7 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:* | 2.6.23 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:* | 2.6.24 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:* | 2.6.25 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:* | 2.6.26 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:* | 2.6.26.1 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:* | 2.6.26.2 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:* | 2.6.26.3 | Running on | Linux |
| cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:* | 9 | Vulnerable | Red Hat |
| cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:* | 2.6.23.8 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:* | 2.6.23.9 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:* | 2.6.23.10 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:* | 2.6.23.11 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:* | 2.6.23.12 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:* | 2.6.23.13 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:* | 2.6.23.15 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:* | 2.6.23.16 | Running on | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:* | 2.6.23.17 | Running on | Linux |
- cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:* Versions 2.6 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:* Versions 2.6.18 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:* Versions 2.6.18 rc1 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:* Versions 2.6.18 rc2 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:* Versions 2.6.18 rc3 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:* Versions 2.6.18 rc4 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:* Versions 2.6.18 rc5 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:* Versions 2.6.18 rc6 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:* Versions 2.6.18 rc7 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:* Versions 2.6.19.4 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:* Versions 2.6.19.5 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:* Versions 2.6.19.6 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:* Versions 2.6.19.7 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:* Versions 2.6.20.16 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:* Versions 2.6.20.17 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:* Versions 2.6.20.18 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:* Versions 2.6.20.19 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:* Versions 2.6.20.20 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:* Versions 2.6.20.21 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:* Versions 2.6.21.5 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:* Versions 2.6.21.6 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:* Versions 2.6.21.7 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:* Versions 2.6.22 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:* Versions 2.6.22.1 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:* Versions 2.6.22.2 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:* Versions 2.6.22.8 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:* Versions 2.6.22.9 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:* Versions 2.6.22.10 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:* Versions 2.6.22.11 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:* Versions 2.6.22.12 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:* Versions 2.6.22.13 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:* Versions 2.6.22.14 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:* Versions 2.6.22.15 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:* Versions 2.6.22.17 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:* Versions 2.6.22.18 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:* Versions 2.6.22.19 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:* Versions 2.6.22.20 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:* Versions 2.6.22.21 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:* Versions 2.6.22.22 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:* Versions 2.6.22_rc1 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:* Versions 2.6.22_rc7 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:* Versions 2.6.23 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:* Versions 2.6.24 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:* Versions 2.6.25 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:* Versions 2.6.26 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:* Versions 2.6.26.1 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:* Versions 2.6.26.2 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:* Versions 2.6.26.3 Running on ·Linux
- cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·Red Hat
- cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:* Versions 2.6.23.8 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:* Versions 2.6.23.9 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:* Versions 2.6.23.10 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:* Versions 2.6.23.11 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:* Versions 2.6.23.12 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:* Versions 2.6.23.13 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:* Versions 2.6.23.15 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:* Versions 2.6.23.16 Running on ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:* Versions 2.6.23.17 Running on ·Linux
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2008-3832
- 2026-10-03 Alias added: GHSA-7cqv-rq93-98pp
References
More Red Hat Fedora vulnerabilities
- TI-2007-05701 Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise… CVSS 2.0HIGH 7.1
- TI-2007-04002 Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted… CVSS 2.0MEDIUM 6.8
- TI-2009-02935 Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux… CVSS 2.0HIGH 7.2
- TI-2011-00871 The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat… CVSS 2.0MEDIUM 6.9
- TI-2018-13573 An issue has been found in JasPer 2.0.14. CVSS 3.0MEDIUM 5.5
- TI-2007-05991 The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2008-3832 · CVE Program
- CVE-2008-3832 · NVD
- FIRST EPSS
- GHSA-7cqv-rq93-98pp · GitHub Advisory Database · CC BY 4.0
- CVE-2008-3832 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences