CVE-2025-38614

eventpoll: Fix semi-unbounded recursion

References

Notes

 carnil> Introduced in 22bacca48a17 ("epoll: prevent creating circular epoll
 carnil> structures"). Vulnerable versions: 2.6.32.30 2.6.33.8 2.6.34.10 2.6.35.12
 carnil> 2.6.37.3 2.6.38.

Bugs

Status

Branch Status
upstream released (6.17-rc1) [f2e467a48287c868818085aa35389a224d226732]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.16-upstream-stable released (6.16.1) [3542c90797bc3ab83ebab54b737d751cf3682036]
6.15-upstream-stable released (6.15.11) [ea5f97dbdcb1651581a22bd10afd2f0dd9dc11d6]
6.12-upstream-stable released (6.12.43) [7a2125962c42d5336ca0495a9ce4cb38a63e9161]
6.6-upstream-stable released (6.6.103) [2a0c0c974bea9619c6f41794775ae4b97530e0e6]
6.1-upstream-stable released (6.1.149) [1b13b033062824495554e836a1ff5f85ccf6b039]
5.10-upstream-stable needed
sid released (6.16.3-1)
6.12-trixie-security released (6.12.43-1)
6.1-bookworm-security released (6.1.153-1)
5.10-bullseye-security needed