CVE-2011-1082 in Kernel
Summary
fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
02/24/2011
Disclosure
04/04/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56997 | Linux Kernel resource management | 399 | Proof-of-Concept | Official fix | CVE-2011-1082 |