CVE-2011-1082
fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack…
Does this matter?
Lower severity and a low EPSS score (0.78%). Track it; it rarely justifies an emergency change on its own.
Description
fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
- CVSS 2.0
- 4.9 MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 0.78% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-400
- Affected
- linux/linux kernel
- Source
- secalert@redhat.com
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e
- http://openwall.com/lists/oss-security/2011/03/02/1Mailing List, Patch, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/03/02/2Mailing List, Patch, Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=681575Issue Tracking, Patch, Third Party Advisory
- https://lkml.org/lkml/2011/2/5/220Mailing List, Patch, Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e
- http://openwall.com/lists/oss-security/2011/03/02/1Mailing List, Patch, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/03/02/2Mailing List, Patch, Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=681575Issue Tracking, Patch, Third Party Advisory
- https://lkml.org/lkml/2011/2/5/220Mailing List, Patch, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.