CVE-2011-1083: linux linux_kernel Uncontrolled Resource Consumption

Modified

AliasesRHBA-2012:0496RHSA-2012:0150

Published 03-04-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-1083 is a medium (CVSS 4.9) Uncontrolled Resource Consumption vulnerability in linux linux_kernel. EPSS estimates a 0.80% chance of exploitation in the next 30 days, higher than 56.4% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 4.9, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.9/10

010

Medium · v2.0 (NVD)

EPSS score

0.80%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 2

RHSA-2012:0862 RHSA-2012:1129

Timeline

03-04-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.

CVSS metrics

1 score · 1 source · 1 version

v2.04.9

EPSS trend

Probability

0.80%

Chance of exploitation in the next 30 days

Percentile

56%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.80% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databasedoslinuxVerified
Linux Kernel 2.6.x - epoll Nested Structures Local Denial of Service
Maturity: poc

Weaknesses

CWE · root cause

CWE-400Uncontrolled Resource ConsumptionThe product does not properly control the allocation and maintenance of a limited resource.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat35 products

enterprise_linux_desktop6.0
enterprise_linux_server6.0
enterprise_linux_workstation6.0
kernel< 0:2.6.18-308.el5
kernel-debug< 0:2.6.18-308.el5

Show all 35

Suse2 products

linux_enterprise_desktop11:sp1 | 11:sp2
linux_enterprise_server11:sp1 | 11:sp2

Linux1 product

linux_kernel≤ 2.6.37.2

3 vendors · 38 products

References

90 links

article.gmane.org/gmane.linux.kernel/1105888Mailing ListX Refsource MLISTBroken Link
secunia.com/advisories/43522Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
openwall.com/lists/oss-security/2011/03/02/2Mailing ListX Refsource MLISTPatch
article.gmane.org/gmane.linux.kernel/1106686Mailing ListX Refsource MLISTBroken Link
secunia.com/advisories/48898Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/show_bug.cgi?id=681578X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryREPORT
secunia.com/advisories/48410Third Party AdvisoryX Refsource SECUNIA
article.gmane.org/gmane.linux.kernel/1105744Mailing ListX Refsource MLISTBroken Link
secunia.com/advisories/48964Third Party AdvisoryX Refsource SECUNIA

Show all 90 references

openwall.com/lists/oss-security/2011/03/02/1Mailing ListX Refsource MLISTPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/48115Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2012-0862.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.osvdb.org/71265VDB EntryX Refsource OSVDBBroken Link
access.redhat.com/errata/RHBA-2012:0496Advisory
bugzilla.redhat.com/show_bug.cgi?id=675885REPORT
bugzilla.redhat.com/show_bug.cgi?id=787331REPORT
bugzilla.redhat.com/show_bug.cgi?id=796297REPORT
security.access.redhat.com/data/csaf/v2/advisories/2012/rhba-2012_0496.jsonAdvisory
access.redhat.com/security/cve/CVE-2011-1083REPORT
www.cve.org/CVERecord?id=CVE-2011-1083Advisory
nvd.nist.gov/vuln/detail/CVE-2011-1083Advisory
access.redhat.com/errata/RHSA-2012:0150Advisory
access.redhat.com/security/updates/classification/ARTICLE
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.8_Technical_Notes/kernel.htmlARTICLE
bugzilla.redhat.com/show_bug.cgi?id=485173REPORT
bugzilla.redhat.com/show_bug.cgi?id=516170REPORT
bugzilla.redhat.com/show_bug.cgi?id=526862REPORT
bugzilla.redhat.com/show_bug.cgi?id=543064REPORT
bugzilla.redhat.com/show_bug.cgi?id=571737REPORT
bugzilla.redhat.com/show_bug.cgi?id=585935REPORT
bugzilla.redhat.com/show_bug.cgi?id=608156REPORT
bugzilla.redhat.com/show_bug.cgi?id=618317REPORT
bugzilla.redhat.com/show_bug.cgi?id=664653REPORT
bugzilla.redhat.com/show_bug.cgi?id=668027REPORT
bugzilla.redhat.com/show_bug.cgi?id=668529REPORT
bugzilla.redhat.com/show_bug.cgi?id=674663REPORT
bugzilla.redhat.com/show_bug.cgi?id=683372REPORT
bugzilla.redhat.com/show_bug.cgi?id=688673REPORT
bugzilla.redhat.com/show_bug.cgi?id=688791REPORT
bugzilla.redhat.com/show_bug.cgi?id=694625REPORT
bugzilla.redhat.com/show_bug.cgi?id=697021REPORT
bugzilla.redhat.com/show_bug.cgi?id=698842REPORT
bugzilla.redhat.com/show_bug.cgi?id=698928REPORT
bugzilla.redhat.com/show_bug.cgi?id=699549REPORT
bugzilla.redhat.com/show_bug.cgi?id=700565REPORT
bugzilla.redhat.com/show_bug.cgi?id=700752REPORT
bugzilla.redhat.com/show_bug.cgi?id=700886REPORT
bugzilla.redhat.com/show_bug.cgi?id=703150REPORT
bugzilla.redhat.com/show_bug.cgi?id=703505REPORT
bugzilla.redhat.com/show_bug.cgi?id=704921REPORT
bugzilla.redhat.com/show_bug.cgi?id=706339REPORT
bugzilla.redhat.com/show_bug.cgi?id=707966REPORT
bugzilla.redhat.com/show_bug.cgi?id=709271REPORT
bugzilla.redhat.com/show_bug.cgi?id=709515REPORT
bugzilla.redhat.com/show_bug.cgi?id=711070REPORT
bugzilla.redhat.com/show_bug.cgi?id=712439REPORT
bugzilla.redhat.com/show_bug.cgi?id=712440REPORT
bugzilla.redhat.com/show_bug.cgi?id=712441REPORT
bugzilla.redhat.com/show_bug.cgi?id=713702REPORT
bugzilla.redhat.com/show_bug.cgi?id=714053REPORT
bugzilla.redhat.com/show_bug.cgi?id=714670REPORT
bugzilla.redhat.com/show_bug.cgi?id=715501REPORT
bugzilla.redhat.com/show_bug.cgi?id=716834REPORT
bugzilla.redhat.com/show_bug.cgi?id=717434REPORT
bugzilla.redhat.com/show_bug.cgi?id=717850REPORT
bugzilla.redhat.com/show_bug.cgi?id=718232REPORT
bugzilla.redhat.com/show_bug.cgi?id=718641REPORT
bugzilla.redhat.com/show_bug.cgi?id=718988REPORT
bugzilla.redhat.com/show_bug.cgi?id=720347REPORT
bugzilla.redhat.com/show_bug.cgi?id=720551REPORT
bugzilla.redhat.com/show_bug.cgi?id=720936REPORT
bugzilla.redhat.com/show_bug.cgi?id=720986REPORT
bugzilla.redhat.com/show_bug.cgi?id=723755REPORT
bugzilla.redhat.com/show_bug.cgi?id=728508REPORT
bugzilla.redhat.com/show_bug.cgi?id=729261REPORT
bugzilla.redhat.com/show_bug.cgi?id=732752REPORT
bugzilla.redhat.com/show_bug.cgi?id=733416REPORT
bugzilla.redhat.com/show_bug.cgi?id=734708REPORT
bugzilla.redhat.com/show_bug.cgi?id=734900REPORT
bugzilla.redhat.com/show_bug.cgi?id=735477REPORT
bugzilla.redhat.com/show_bug.cgi?id=740203REPORT
bugzilla.redhat.com/show_bug.cgi?id=740299REPORT
bugzilla.redhat.com/show_bug.cgi?id=742880REPORT
bugzilla.redhat.com/show_bug.cgi?id=752626REPORT
bugzilla.redhat.com/show_bug.cgi?id=753729REPORT
bugzilla.redhat.com/show_bug.cgi?id=771592REPORT
bugzilla.redhat.com/show_bug.cgi?id=772578REPORT
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0150.jsonAdvisory