CVE-2012-3375
Linux Kernel < 3.2.24 - Denial of Service via EPOLL_CTL_ADD Circular Dependency
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-3375. PoCs published by Yurij M. Plotnikov.
AI-analyzed exploit summary This exploit triggers a local denial-of-service (DoS) in the Linux kernel by creating circular dependencies between epoll file descriptors, leading to a kernel crash. The PoC repeatedly creates epoll instances, sockets, and binds them in a way that causes a kernel panic.
Description
The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.
Exploits (1)
This exploit triggers a local denial-of-service (DoS) in the Linux kernel by creating circular dependencies between epoll file descriptors, leading to a kernel crash. The PoC repeatedly creates epoll instances, sockets, and binds them in a way that causes a kernel panic.