Bug 440798

Summary:	Kernel : epoll Denial of Service Vulnerability (CVE-2012-3375)
Product:	Gentoo Security	Reporter:	Agostino Sarubbo <ago>
Component:	Kernel	Assignee:	Gentoo Kernel Security <security-kernel>
Status:	RESOLVED OBSOLETE
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Agostino Sarubbo gentoo-dev

2012-11-01 17:29:22 UTC

From https://secunia.com/advisories/49737/ :

Description
A vulnerability has been reported in the Linux Kernel, which can be exploited by malicious, local 
users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when handling epoll descriptor return values and can be 
exploited to cause a high CPU consumption.


Solution
Fixed in the GIT repository.

Provided and/or discovered by
Yurij M. Plotnikov

Changelog
Further details available in Customer Area

Original Advisory
https://lkml.org/lkml/2012/3/27/65

Comment 1 Aaron Bauman (RETIRED) gentoo-dev

2018-04-04 18:22:36 UTC

There are no longer any 2.x or <3.2.24 kernels available in the repository with the exception of sys-kernel/xbox-sources which is unsupported by security.