CVE-2012-3375: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.

Affected products

• Linux Linux Kernel: up to and including 3.2.23; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; version 3.0.5 only; …

Published 2012-10-03. Last modified 2026-06-16.