The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headersUpgrade perfUpgrade kernel-docUpgrade kernel-firmwareUpgrade kernel-devel | Dec 1, 2016 | Apr 4, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 3, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 25, 2011 |
| Suse | — | Upgrade kernel-ppc64-develUpgrade kernel-ec2-develUpgrade hyper-v-kmp-traceUpgrade kernel-ppc64Upgrade ext4dev-kmp-xenUpgrade kernel-trace-extraUpgrade xen-kmp-defaultUpgrade btrfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-baseUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-traceUpgrade xen-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-pae-extraUpgrade ext4dev-kmp-paeUpgrade kernel-sourceUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade kernel-xenUpgrade hyper-v-kmp-defaultUpgrade kernel-xen-develUpgrade xen-kmp-traceUpgrade kernel-default-extraUpgrade kernel-trace-baseUpgrade hyper-v-kmp-paeUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-default-develUpgrade kernel-symsUpgrade btrfs-kmp-paeUpgrade kernel-xen-extraUpgrade kernel-paeUpgrade kernel-traceUpgrade kernel-ec2Upgrade btrfs-kmp-xen | Feb 17, 2015 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub