VULNERABILITY INTELLIGENCE

CVE-2011-1083

CVSS score4.9 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2011-04-04
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.

Weakness classification

  • CWE-400: Uncontrolled Resource Consumption

Primary references