The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2 using CLONE_THREAD does not use the thread group ID to check whether it is attaching to itself which allows local users to cause a denial of service (crash).