CVE detail
CVE-2011-1082 — CVE-2011-1082
Published 2011-04-04 · Modified 2026-06-16 · Vendor linux · Product linux_kernel · Source nvd
UNKNOWN
severity
CVSS-derived band
0.0078
EPSS probability
exploitation probability, 30d
53.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References