CVE-2011-1083

N/A
Published: April 3, 2011 at 01:00 AM UTC
Updated: June 16, 2026 at 11:28 PM UTC
6 products affected across 3 vendorsLinux KernelEnterprise Linux DesktopEnterprise Linux Server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.8%

Description

The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (15)

Mailing Listx_refsource_MLISTBroken Link
http://article.gmane.org/gmane.linux.kernel/1105744
Mailing Listx_refsource_MLISTBroken Link
http://article.gmane.org/gmane.linux.kernel/1105888
Mailing Listx_refsource_MLISTBroken Link
http://article.gmane.org/gmane.linux.kernel/1106686
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
Mailing Listx_refsource_MLISTPatchThird Party Advisory
http://openwall.com/lists/oss-security/2011/03/02/1
Vendor Advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0862.html

CVSS

Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-400

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card