The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-debug | Dec 1, 2016 | Oct 3, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 3, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Oct 3, 2012 |
| Redhat_linux | — | No solution exists | Jul 16, 2026 | Mar 27, 2012 |
| Suse | — | Upgrade hyper-v-kmp-paeUpgrade kernel-xenUpgrade btrfs-kmp-paeUpgrade ext4dev-kmp-paeUpgrade kernel-ec2Upgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade kernel-xen-extraUpgrade kernel-traceUpgrade xen-kmp-traceUpgrade kernel-sourceUpgrade kernel-pae-develUpgrade hyper-v-kmp-traceUpgrade xen-kmp-defaultUpgrade btrfs-kmp-xenUpgrade kernel-paeUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade hyper-v-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-ppc64Upgrade kernel-ec2-develUpgrade kernel-ppc64-baseUpgrade kernel-pae-extraUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-pae-baseUpgrade ext4dev-kmp-traceUpgrade kernel-symsUpgrade btrfs-kmp-defaultUpgrade xen-kmp-paeUpgrade kernel-default-manUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade kernel-ppc64-develUpgrade kernel-trace-extra | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-29-powerpc64-smpUpgrade linux-image-3.2.0-29-genericUpgrade linux-image-3.2.0-29-generic-paeUpgrade linux-image-3.0.0-24-virtualUpgrade linux-image-3.0.0-24-serverUpgrade linux-image-3.2.0-29-powerpc-smpUpgrade linux-image-3.0.0-1214-omap4Upgrade linux-image-3.0.0-24-powerpcUpgrade linux-image-3.2.0-29-omapUpgrade linux-image-3.0.0-24-omapUpgrade linux-image-3.2.0-29-highbankUpgrade linux-image-3.2.0-29-virtualUpgrade linux-image-3.0.0-24-powerpc64-smpUpgrade linux-image-3.0.0-24-genericUpgrade linux-image-3.2.0-1417-omap4Upgrade linux-image-3.0.0-24-powerpc-smpUpgrade linux-image-3.0.0-24-generic-pae | Nov 8, 2024 | Oct 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub