CVE-2008-2944: Double Free

Published Jun 30, 2008

Updated

Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than CVE-2008-2365.

Affected Software

3 affected components

redhat Enterprise Linux=5.0

Fedoraproject Fedora Core=6

Linux Linux kernel=2.6.18

Event History

Jun 30, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2944?

CVE-2008-2944 has been categorized as a high severity vulnerability due to its ability to cause denial of service through a double free condition.

How do I fix CVE-2008-2944?

To mitigate CVE-2008-2944, users should upgrade to the latest patched version of the Linux kernel for their distribution.

Which software is affected by CVE-2008-2944?

CVE-2008-2944 affects Red Hat Enterprise Linux 5.0, Fedora Core 6, and Linux Kernel version 2.6.18.

Can CVE-2008-2944 be exploited remotely?

CVE-2008-2944 is classified as a local vulnerability, meaning it can only be exploited by local users on the affected systems.

What are the impacts of CVE-2008-2944?

The primary impact of CVE-2008-2944 is the potential to crash the system, leading to a denial of service.