CVE-2012-3375
Status: ModifiedMedium (4.9)—Exploit
Severity4.9Medium · CVSS 2.0
Exploitation probability1.02 %higher than 63% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB
The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.
CVSS
- Base score
- 4.9
- Version
- 2.0
- Vector
- AV:L/AC:L/Au:N/C:N/I:N/A:C
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 1.02 %
- Percentile among all scored CVEs
- 63
- Score date
- 10/20/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Public exploits
Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.
- Published on Exploit-DB · Linux Kernel 3.2.24 - 'fs/eventpoll.c' Local Denial of Service (7/5/2012)
Affected technologies (1)
CWEs
- NVD-CWE-Other
References
Show 18 references
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13d518074a952d33d47c428419693f63389547e9
- http://secunia.com/advisories/51164
- http://ubuntu.com/usn/usn-1529-1
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24
- http://www.openwall.com/lists/oss-security/2012/07/04/2
- http://www.securitytracker.com/id?1027237
- https://bugzilla.redhat.com/show_bug.cgi?id=837502
- https://downloads.avaya.com/css/P8/documents/100165733
- https://github.com/torvalds/linux/commit/13d518074a952d33d47c428419693f63389547e9
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13d518074a952d33d47c428419693f63389547e9
- http://secunia.com/advisories/51164
- http://ubuntu.com/usn/usn-1529-1
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24
- http://www.openwall.com/lists/oss-security/2012/07/04/2
- http://www.securitytracker.com/id?1027237
- https://bugzilla.redhat.com/show_bug.cgi?id=837502
- https://downloads.avaya.com/css/P8/documents/100165733
- https://github.com/torvalds/linux/commit/13d518074a952d33d47c428419693f63389547e9
Raw JSON (NVD)
Show
{
"id": "CVE-2012-3375",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.9,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-10-03T11:02:56.267",
"references": [
{
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13d518074a952d33d47c428419693f63389547e9",
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/51164",
"source": "secalert@redhat.com"
},
{
"url": "http://ubuntu.com/usn/usn-1529-1",
"source": "secalert@redhat.com"
},
{
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/07/04/2",
"source": "secalert@redhat.com"
},
{
"url": "http://www.securitytracker.com/id?1027237",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=837502",
"source": "secalert@redhat.com"
},
{
"url": "https://downloads.avaya.com/css/P8/documents/100165733",
"source": "secalert@redhat.com"
},
{
"url": "https://github.com/torvalds/linux/commit/13d518074a952d33d47c428419693f63389547e9",
"tags": [
"Exploit"
],
"source": "secalert@redhat.com"
},
{
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13d518074a952d33d47c428419693f63389547e9",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/51164",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://ubuntu.com/usn/usn-1529-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/07/04/2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1027237",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=837502",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://downloads.avaya.com/css/P8/documents/100165733",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/torvalds/linux/commit/13d518074a952d33d47c428419693f63389547e9",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083."
},
{
"lang": "es",
"value": "La llamada al sistema epoll_ctl en fs/eventpoll.c en el Kernel de Linux anteriores a v3.2.24 no gestiona de forma adecuada errores ELOOP en operaciones EPOLL_CTL_ADD, lo que permite a usuarios locales provocar una denegación de servicio (consumo de descriptores de ficheros y caída del sistema) a través de una aplicación manipulada que intenta crear una dependencia epoll circular. NOTA: esta vulnerabilidad existe debido a una resolución incorrecta de CVE-2011-1083."
}
],
"lastModified": "2026-06-16T23:43:06.190",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "725BF729-A574-4AA1-9E9A-277DCBAED63F",
"versionEndIncluding": "3.2.23"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38989541-2360-4E0A-AE5A-3D6144AA6114"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E51646B-7A0E-40F3-B8C9-239C1DA81DD1"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42A8A507-F8E2-491C-A144-B2448A1DB26E"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "901FC6F3-2C2A-4112-AE27-AB102BBE8DEE"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "203AD334-DB9F-41B0-A4D1-A6C158EF8C40"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3611753-E440-410F-8250-600C996A4B8E"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9739BB47-EEAF-42F1-A557-2AE2EA9526A3"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A95E3BB-0AFC-4C2E-B9BE-C975E902A266"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "482A6C9A-9B8E-4D1C-917A-F16370745E7C"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6D87357-63E0-41D0-9F02-1BCBF9A77E63"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3765A2D6-2D78-4FB1-989E-D5106BFA3F5E"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F54257DB-7023-43C4-AC4D-9590B815CD92"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61FF5FCD-A4A1-4803-AC53-320A4C838AF6"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F096553-064F-46A2-877B-F32F163A0F49"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0D762D1-E3AD-40EA-8D39-83EEB51B5E85"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6187D19-7148-4B87-AD7E-244FF9EE0FA6"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99AC64C2-E391-485C-9CD7-BA09C8FA5E63"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CDA5E95-7805-441B-BEF7-4448EA45E964"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51561053-6C28-4F38-BC9B-3F7A7508EB72"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "118F4A5B-C498-4FC3-BE28-50D18EBE4F22"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD38EBE6-FE1A-4B55-9FB5-07952253B7A5"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A491E47-82AD-4055-9444-2EC0D6715326"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13C5FD16-23B6-467F-9438-5B554922F974"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C67235F-5B51-4BF7-89EC-4810F720246F"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08405DEF-05F4-45F0-AC95-DBF914A36D93"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A7B9C4B-4A41-4175-9F07-191C1EE98C1F"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B306E0A8-4D4A-4895-8128-A500D30A7E0C"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "295C839A-F34E-4853-A926-55EABC639412"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2AFD5F49-7EF9-4CFE-95BD-8FD19B500B0A"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00B3DDDD-B2F6-4753-BA38-65A24017857D"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33FCD39E-F4BF-432D-9CF9-F195CF5844F3"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7308690-CB0D-4758-B80F-D2ADCD2A9D66"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "313A470B-8A2B-478A-82B5-B27D2718331C"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83FF021E-07E3-41CC-AAE8-D99D7FF24B9D"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B155BBDF-6DF6-4FF5-9C41-D8A5266DCC67"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28476DEC-9630-4B40-9D4D-9BC151DC4CA4"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5646880A-2355-4BDD-89E7-825863A0311F"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FF99148-267A-46F8-9927-A9082269BAF6"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A783C083-5D9C-48F9-B5A6-A97A9604FB19"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B817A24-03AC-46CD-BEFA-505457FD2A5D"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51CF1BCE-090E-4B70-BA16-ACB74411293B"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "187AAD67-10D7-4B57-B4C6-00443E246AF3"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F341CE88-C5BC-4CDD-9CB5-B6BAD7152E63"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37ACE2A6-C229-4236-8E9F-235F008F3AA0"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE348F7B-02DE-47D5-8011-F83DA9426021"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E91594EA-F0A3-41B3-A9C6-F7864FC2F229"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E1ECCDB-0208-48F6-B44F-16CC0ECE3503"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBA8B5DE-372E-47E0-A0F6-BE286D509CC3"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A1CA083-2CF8-45AE-9E15-1AA3A8352E3B"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19D69A49-5290-4C5F-8157-719AD58D253D"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "290BD969-42E7-47B0-B21B-06DE4865432C"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23A9E29E-DE78-4C73-9FBD-C2410F5FC8B8"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "018434C9-E75F-45CB-A169-DAB4B1D864D7"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC0AC68F-EC58-4C4F-8CBC-A59ECC00CCDE"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C123C844-F6D7-471E-A62E-F756042FB1CD"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A11C38BB-7FA2-49B0-AAC9-83DB387A06DB"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61F3733C-E5F6-4855-B471-DF3FB823613B"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DDCA75F-9A06-4457-9A45-38A38E7F7086"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AEA837E-7864-4003-8DB7-111ED710A7E1"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6FE471F-2D1F-4A1D-A197-7E46B75787E1"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDA9E6AB-58DC-4EC5-A25C-11F9D0B38BF7"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC6B8DB3-B05B-41A2-B091-342D66AAE8F5"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "958F0FF8-33EF-4A71-A0BD-572C85211DBA"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBA39F48-B02F-4C48-B304-DA9CCA055244"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FF841F3-48A7-41D7-9C45-A8170435A5EB"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF506916-A6DC-4B1E-90E5-959492AF55F4"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}