fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 3, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2011 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-vmi-baseUpgrade kernel-ec2-extraUpgrade kernel-develUpgrade kernel-vmiUpgrade preload-kmp-desktopUpgrade kernel-defaultUpgrade kernel-paeUpgrade kernel-desktop-develUpgrade kernel-default-baseUpgrade kernel-vanilla-baseUpgrade preload-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-vanilla-develUpgrade kernel-ec2Upgrade kernel-vanillaUpgrade kernel-docsUpgrade kernel-desktopUpgrade kernel-debug-develUpgrade kernel-ec2-develUpgrade kernel-debug-baseUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-trace-develUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-ec2-baseUpgrade kernel-xen-baseUpgrade kernel-vmi-develUpgrade kernel-xenUpgrade kernel-desktop-base | Feb 17, 2015 | Apr 4, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-powerpc64-smp | Nov 8, 2024 | Apr 4, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub