CVE-2008-1514 — kernel: ptrace: Padding area write - unprivileged kernel crash

Back Back to CVE browser

MEDIUM

kernel: ptrace: Padding area write - unprivileged kernel crash

Published Mar 26, 2008

4.9

MEDIUM

CVSS 2.0

EPSS 0.53%

Description

arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference.

Affected products

Product	Package	State	Advisory
Red Hat Enterprise Linux 4	kernel-0:2.6.9-78.0.8.EL	Fixed	RHSA-2008:0972

Remediation

Red Hat statement

This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 5, and Red Hat Enterprise MRG.

Metrics

0.53% 0.00529

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.00529

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	0.53% (0.00529)	42.69th	v5 (v2026.06.15)
Jun 15, 2026	0.53% (0.00529)	40.29th	v5 (v2026.06.15)
Mar 17, 2025	0.13% (0.00128)	29.74th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	11.89th	v3 (v2023.03.01)
Jul 2, 2024	0.04% (0.00044)	10.25th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	8.24th	v3 (v2023.03.01)
Mar 6, 2023	1.55% (0.01547)	74.98th	v2 (v2022.01.01)
Feb 23, 2023	1.55% (0.01547)	74.94th	v2 (v2022.01.01)
Apr 1, 2022	1.55% (0.01547)	72.92th	v2 (v2022.01.01)
Feb 4, 2022	1.55% (0.01547)	51.82th	v2 (v2022.01.01)

Weaknesses (1)

CWE-399

References (20)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d6e48f43340343d97839eadb1ab7b6a3ea98797
x_refsource_CONFIRM
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6
x_refsource_CONFIRMVendor Advisory
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html
vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2008-0972.html
vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/31826
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/32237
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/32315
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/32356
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/32799
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://sourceware.org/systemtap/wiki/utrace/tests
x_refsource_MISCExploit
http://www.debian.org/security/2008/dsa-1653
vendor-advisoryx_refsource_DEBIANPatch
http://www.debian.org/security/2008/dsa-1655
vendor-advisoryx_refsource_DEBIANPatch
http://www.securityfocus.com/bid/31177
vdb-entryx_refsource_BIDExploitPatch
https://access.redhat.com/security/cve/CVE-2008-1514
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=438147
x_refsource_CONFIRMExploitIssue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/41501
vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2008-1514
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9555
vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2008-1514

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d6e48f43340343d97839eadb1ab7b6a3ea98797		x_refsource_CONFIRM
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6		x_refsource_CONFIRMVendor Advisory
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6		x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html		vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2008-0972.html		vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/31826		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/32237		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/32315		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/32356		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/32799		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://sourceware.org/systemtap/wiki/utrace/tests		x_refsource_MISCExploit
http://www.debian.org/security/2008/dsa-1653		vendor-advisoryx_refsource_DEBIANPatch
http://www.debian.org/security/2008/dsa-1655		vendor-advisoryx_refsource_DEBIANPatch
http://www.securityfocus.com/bid/31177		vdb-entryx_refsource_BIDExploitPatch
https://access.redhat.com/security/cve/CVE-2008-1514		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=438147		x_refsource_CONFIRMExploitIssue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/41501		vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2008-1514
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9555		vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2008-1514

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 26, 2008

Updated Aug 7, 2024

Reserved Mar 25, 2008

Link CVE-2008-1514

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-1514

Red Hat

Severity Important

Public date Mar 18, 2008

Links CVE-2008-1514 - Bugzilla