The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | 3.0.1 | 3.0.1 |
| Linux_kernel | Linux | 3.0.2 | 3.0.2 |
| Linux_kernel | Linux | 3.0.3 | 3.0.3 |
| Linux_kernel | Linux | 3.0.4 | 3.0.4 |
| Linux_kernel | Linux | 3.0.5 | 3.0.5 |
| Linux_kernel | Linux | 3.0.6 | 3.0.6 |
| Linux_kernel | Linux | 3.0.7 | 3.0.7 |
| Linux_kernel | Linux | 3.0.8 | 3.0.8 |
| Linux_kernel | Linux | 3.0.9 | 3.0.9 |
| Linux_kernel | Linux | 3.0.10 | 3.0.10 |
| Linux_kernel | Linux | 3.0.11 | 3.0.11 |
| Linux_kernel | Linux | 3.0.12 | 3.0.12 |
| Linux_kernel | Linux | 3.0.13 | 3.0.13 |
| Linux_kernel | Linux | 3.0.14 | 3.0.14 |
| Linux_kernel | Linux | 3.0.15 | 3.0.15 |
| Linux_kernel | Linux | 3.0.16 | 3.0.16 |
| Linux_kernel | Linux | 3.0.17 | 3.0.17 |
| Linux_kernel | Linux | 3.0.18 | 3.0.18 |
| Linux_kernel | Linux | 3.0.19 | 3.0.19 |
| Linux_kernel | Linux | 3.0.20 | 3.0.20 |
| Linux_kernel | Linux | 3.0.21 | 3.0.21 |
| Linux_kernel | Linux | 3.0.22 | 3.0.22 |
| Linux_kernel | Linux | 3.0.23 | 3.0.23 |
| Linux_kernel | Linux | 3.0.24 | 3.0.24 |
| Linux_kernel | Linux | 3.0.25 | 3.0.25 |
| Linux_kernel | Linux | 3.0.26 | 3.0.26 |
| Linux_kernel | Linux | 3.0.27 | 3.0.27 |
| Linux_kernel | Linux | 3.0.28 | 3.0.28 |
| Linux_kernel | Linux | 3.0.29 | 3.0.29 |
| Linux_kernel | Linux | 3.0.30 | 3.0.30 |
| Linux_kernel | Linux | 3.0.31 | 3.0.31 |
| Linux_kernel | Linux | 3.0.32 | 3.0.32 |
| Linux_kernel | Linux | 3.0.33 | 3.0.33 |
| Linux_kernel | Linux | 3.0.34 | 3.0.34 |
| Linux_kernel | Linux | 3.1.1 | 3.1.1 |
| Linux_kernel | Linux | 3.1.2 | 3.1.2 |
| Linux_kernel | Linux | 3.1.3 | 3.1.3 |
| Linux_kernel | Linux | 3.1.4 | 3.1.4 |
| Linux_kernel | Linux | 3.1.5 | 3.1.5 |
| Linux_kernel | Linux | 3.1.6 | 3.1.6 |
| Linux_kernel | Linux | 3.1.7 | 3.1.7 |
| Linux_kernel | Linux | 3.1.8 | 3.1.8 |
| Linux_kernel | Linux | 3.1.9 | 3.1.9 |
| Linux_kernel | Linux | 3.1.10 | 3.1.10 |
| Linux_kernel | Linux | 3.2.1 | 3.2.1 |
| Linux_kernel | Linux | 3.2.2 | 3.2.2 |
| Linux_kernel | Linux | 3.2.3 | 3.2.3 |
| Linux_kernel | Linux | 3.2.4 | 3.2.4 |
| Linux_kernel | Linux | 3.2.5 | 3.2.5 |
| Linux_kernel | Linux | 3.2.6 | 3.2.6 |
| Linux_kernel | Linux | 3.2.7 | 3.2.7 |
| Linux_kernel | Linux | 3.2.8 | 3.2.8 |
| Linux_kernel | Linux | 3.2.9 | 3.2.9 |
| Linux_kernel | Linux | 3.2.10 | 3.2.10 |
| Linux_kernel | Linux | 3.2.11 | 3.2.11 |
| Linux_kernel | Linux | 3.2.12 | 3.2.12 |
| Linux_kernel | Linux | 3.2.13 | 3.2.13 |
| Linux_kernel | Linux | 3.2.14 | 3.2.14 |
| Linux_kernel | Linux | 3.2.15 | 3.2.15 |
| Linux_kernel | Linux | 3.2.16 | 3.2.16 |
| Linux_kernel | Linux | 3.2.17 | 3.2.17 |
| Linux_kernel | Linux | 3.2.18 | 3.2.18 |
| Linux_kernel | Linux | 3.2.19 | 3.2.19 |
| Linux_kernel | Linux | 3.2.20 | 3.2.20 |
| Linux_kernel | Linux | 3.2.21 | 3.2.21 |
| Linux_kernel | Linux | 3.2.22 | 3.2.22 |
| Linux_kernel | Linux | * | 3.2.23 |
| Red Hat Enterprise Linux 5 | RedHat | kernel-0:2.6.18-308.11.1.el5 | * |
| Red Hat Enterprise MRG 2 | RedHat | kernel-rt-0:3.0.36-rt57.66.el6rt | * |
| Linux | Ubuntu | oneiric | * |
| Linux | Ubuntu | precise | * |
| Linux | Ubuntu | precise/esm | * |
| Linux | Ubuntu | upstream | * |
| Linux-armadaxp | Ubuntu | precise | * |
| Linux-armadaxp | Ubuntu | upstream | * |
| Linux-aws | Ubuntu | upstream | * |
| Linux-ec2 | Ubuntu | upstream | * |
| Linux-flo | Ubuntu | upstream | * |
| Linux-fsl-imx51 | Ubuntu | lucid | * |
| Linux-fsl-imx51 | Ubuntu | upstream | * |
| Linux-gke | Ubuntu | upstream | * |
| Linux-goldfish | Ubuntu | saucy | * |
| Linux-goldfish | Ubuntu | upstream | * |
| Linux-grouper | Ubuntu | saucy | * |
| Linux-grouper | Ubuntu | trusty | * |
| Linux-grouper | Ubuntu | upstream | * |
| Linux-grouper | Ubuntu | utopic | * |
| Linux-hwe | Ubuntu | upstream | * |
| Linux-hwe-edge | Ubuntu | upstream | * |
| Linux-linaro-omap | Ubuntu | natty | * |
| Linux-linaro-omap | Ubuntu | oneiric | * |
| Linux-linaro-omap | Ubuntu | precise | * |
| Linux-linaro-omap | Ubuntu | upstream | * |
| Linux-linaro-shared | Ubuntu | oneiric | * |
| Linux-linaro-shared | Ubuntu | precise | * |
| Linux-linaro-shared | Ubuntu | upstream | * |
| Linux-linaro-vexpress | Ubuntu | natty | * |
| Linux-linaro-vexpress | Ubuntu | oneiric | * |
| Linux-linaro-vexpress | Ubuntu | precise | * |
| Linux-linaro-vexpress | Ubuntu | upstream | * |
| Linux-lts-backport-maverick | Ubuntu | lucid | * |
| Linux-lts-backport-maverick | Ubuntu | upstream | * |
| Linux-lts-backport-natty | Ubuntu | upstream | * |
| Linux-lts-backport-oneiric | Ubuntu | lucid | * |
| Linux-lts-backport-oneiric | Ubuntu | upstream | * |
| Linux-lts-trusty | Ubuntu | upstream | * |
| Linux-lts-utopic | Ubuntu | upstream | * |
| Linux-lts-vivid | Ubuntu | upstream | * |
| Linux-lts-wily | Ubuntu | upstream | * |
| Linux-lts-xenial | Ubuntu | upstream | * |
| Linux-maguro | Ubuntu | saucy | * |
| Linux-maguro | Ubuntu | trusty | * |
| Linux-maguro | Ubuntu | upstream | * |
| Linux-mako | Ubuntu | saucy | * |
| Linux-mako | Ubuntu | upstream | * |
| Linux-manta | Ubuntu | saucy | * |
| Linux-manta | Ubuntu | upstream | * |
| Linux-mvl-dove | Ubuntu | lucid | * |
| Linux-mvl-dove | Ubuntu | upstream | * |
| Linux-qcm-msm | Ubuntu | lucid | * |
| Linux-qcm-msm | Ubuntu | natty | * |
| Linux-qcm-msm | Ubuntu | oneiric | * |
| Linux-qcm-msm | Ubuntu | precise | * |
| Linux-qcm-msm | Ubuntu | upstream | * |
| Linux-raspi2 | Ubuntu | upstream | * |
| Linux-raspi2 | Ubuntu | vivid/ubuntu-core | * |
| Linux-snapdragon | Ubuntu | upstream | * |
| Linux-ti-omap4 | Ubuntu | oneiric | * |
| Linux-ti-omap4 | Ubuntu | precise | * |
| Linux-ti-omap4 | Ubuntu | upstream | * |