Resource exhaustion in Linux Kernel
CVE-2011-1083
The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.008 (52.7th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- Redhat Enterprise_linux_desktop — versions 6.0
- Redhat Enterprise_linux_server — versions 6.0
- Redhat Enterprise_linux_workstation — versions 6.0
- Suse Linux_enterprise_desktop — versions 11
- Suse Linux_enterprise_server — versions 11
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Broken Link)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Mailing List)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Broken Link)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Broken Link)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)