Published: 04/04/2011 Updated: 13/02/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 495

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

fs/eventpoll.c in the Linux kernel prior to 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Multiple kernel flaws have been fixed ...

Multiple kernel vulnerabilities have been fixed ...

An attacker could send crafted input to the kernel and cause it to crash ...

Multiple kernel vulnerabilities have been fixed ...

Multiple kernel flaws have been fixed ...

/* source: wwwsecurityfocuscom/bid/46630/info The Linux Kernel epoll Subsystem is prone to multiple local denial-of-service vulnerabilities Successful exploits will allow attackers to cause the kernel to hang, denying service to legitimate users */ #include <unistdh> #include <sys/epollh> #include <sys/timeh> # ...

Ubuntu Security Notice 1202-1 - Dan Rosenberg discovered that several network ioctls did not clear kernel memory correctly A local user could exploit this to read kernel stack memory, leading to a loss of privacy Brad Spengler discovered that stack memory for new a process was not correctly calculated A local attacker could exploit this to crash ...

CWE-400 http://openwall.com/lists/oss-security/2011/03/02/1 https://bugzilla.redhat.com/show_bug.cgi?id=681575 http://openwall.com/lists/oss-security/2011/03/02/2 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 https://lkml.org/lkml/2011/2/5/220 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e https://nvd.nist.gov https://www.exploit-db.com/exploits/35404/https://usn.ubuntu.com/1204-1/

CVE-2011-1082

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect