CVE-2011-1082: fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data stru...

Security readout for executives and security teams

CVE-2011-1082 is a local denial-of-service flaw in Linux kernel epoll handling before 2.6.38. A user who can run code on the system could make the kernel deadlock or consume stack memory, affecting availability rather than confidentiality or remote access. Exposure is mainly Linux systems running kernels before 2.6.38 or vendor kernels without the relevant backport. The attacker needs local code execution or an account capable of running a crafted application. Handle through normal kernel lifecycle unless affected systems are shared, internet-facing platforms with local code execution, or business-critical hosts. No source evidence supports emergency action for active exploitation. Mitigation focus: Identify systems running Linux kernels before 2.6.38.; Check distribution advisories for backported epoll fixes.; Upgrade to a vendor-supported kernel containing the fix..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.