The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernel-doc | Dec 1, 2016 | Oct 3, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 3, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Oct 3, 2012 |
| Redhat_linux | — | No solution exists | Jul 16, 2026 | Mar 27, 2012 |
| Suse | — | Upgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-pae-extraUpgrade xen-kmp-paeUpgrade kernel-trace-extraUpgrade kernel-symsUpgrade btrfs-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-ppc64-baseUpgrade kernel-default-extraUpgrade kernel-ec2-baseUpgrade kernel-ec2-develUpgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade kernel-ppc64-develUpgrade kernel-defaultUpgrade kernel-ppc64Upgrade ext4dev-kmp-traceUpgrade hyper-v-kmp-traceUpgrade kernel-default-develUpgrade kernel-xen-extraUpgrade btrfs-kmp-xenUpgrade kernel-trace-develUpgrade ext4dev-kmp-xenUpgrade hyper-v-kmp-defaultUpgrade xen-kmp-traceUpgrade kernel-trace-baseUpgrade hyper-v-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade btrfs-kmp-paeUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-pae-develUpgrade xen-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-ec2Upgrade kernel-xenUpgrade kernel-pae | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-29-powerpc64-smpUpgrade linux-image-3.0.0-24-serverUpgrade linux-image-3.2.0-29-genericUpgrade linux-image-3.2.0-29-generic-paeUpgrade linux-image-3.2.0-29-powerpc-smpUpgrade linux-image-3.2.0-29-highbankUpgrade linux-image-3.0.0-24-powerpcUpgrade linux-image-3.0.0-24-virtualUpgrade linux-image-3.2.0-29-omapUpgrade linux-image-3.0.0-24-omapUpgrade linux-image-3.0.0-1214-omap4Upgrade linux-image-3.0.0-24-powerpc-smpUpgrade linux-image-3.2.0-29-virtualUpgrade linux-image-3.0.0-24-generic-paeUpgrade linux-image-3.0.0-24-genericUpgrade linux-image-3.2.0-1417-omap4Upgrade linux-image-3.0.0-24-powerpc64-smp | Nov 8, 2024 | Oct 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub