The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-develUpgrade kernel-firmwareUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-develUpgrade python-perf | Dec 1, 2016 | Apr 4, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 3, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 25, 2011 |
| Suse | — | Upgrade xen-kmp-traceUpgrade btrfs-kmp-xenUpgrade kernel-trace-baseUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-paeUpgrade kernel-xen-extraUpgrade kernel-xenUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade hyper-v-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-xen-baseUpgrade hyper-v-kmp-paeUpgrade kernel-default-develUpgrade kernel-xen-develUpgrade kernel-pae-develUpgrade kernel-traceUpgrade btrfs-kmp-paeUpgrade kernel-ppc64Upgrade ext4dev-kmp-xenUpgrade btrfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2-baseUpgrade ext4dev-kmp-traceUpgrade xen-kmp-paeUpgrade kernel-ppc64-baseUpgrade hyper-v-kmp-traceUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-pae-extraUpgrade kernel-ec2-develUpgrade xen-kmp-defaultUpgrade kernel-trace-extraUpgrade kernel-ppc64-devel | Feb 17, 2015 | Jun 28, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub