Description
The utrace support in Linux kernel 2.6.18, and other versions, allows local users to cause a denial of service (system hang) related to "MT exec + utrace_attach spin failure mode," as demonstrated by ptrace-thrash.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +10 | 2.6.18-8.1.3.el5 | RHSA-2007:0169 |
Advisories 1
- RHSA-2007:0169 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- kernel-utracesupport-dos(34128) vdb-entry
- 1017979 vdb-entry
- 23720 vdb-entry
- oval:org.mitre.oval:def:9447 vdb-entry signature
- 35927 vdb-entry
- RHSA-2007:0169 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=228816
- 25080 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=227952