CVE-2011-1082: linux linux_kernel Uncontrolled Resource Consumption
Vulnerability summary
CVE-2011-1082 is a medium (CVSS 4.9) Uncontrolled Resource Consumption vulnerability in linux linux_kernel. EPSS estimates a 0.78% chance of exploitation in the next 30 days, higher than 55.9% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 4.9, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 3Timeline
- 03-04-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.78%
Chance of exploitation in the next 30 days
Percentile
56%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.78% on 05-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundLinux Kernel 2.6.x - fs/eventpoll.c epoll Data Structure File Descriptor Local Denial of Service
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Linux1 product
- linux_kernel< 2.6.38
1 vendor · 1 product
References
6 links- bugzilla.redhat.com/show_bug.cgi?id=681575X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
- git.kernel.orgX Refsource CONFIRM