CVE-2008-2944

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-06-30 · updated 2026-06-16
Weakness: CWE-415

Description

Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than CVE-2008-2365.

Affected products

Fedoraproject Fedora Core: 6
Linux kernel: 2.6.18
Red Hat Enterprise Linux: 5.0

References

https://bugzilla.redhat.com/show_bug.cgi?id=207002
https://bugzilla.redhat.com/show_bug.cgi?id=449359
https://exchange.xforce.ibmcloud.com/vulnerabilities/43556
https://bugzilla.redhat.com/show_bug.cgi?id=207002
https://bugzilla.redhat.com/show_bug.cgi?id=449359
https://exchange.xforce.ibmcloud.com/vulnerabilities/43556

Get alerted when CVE-2008-2944 or the next vulnerability affects your stack