Eventpoll Recursion Depth Vulnerability in Linux Kernel
Summary
CVE-2025-38614: In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It manages system resources, facilitates communication between hardware and software, and ensures system stability. The kernel is crucial for performance and security, making it a prime target for vulnerabilities. This specific vulnerability affects the eventpoll subsystem, which is responsible for monitoring multiple file descriptors to see if they are ready for I/O operations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the eventpoll subsystem that allows for semi-unbounded recursion. This issue arises from insufficient checks on the depth of recursion when processing epoll instances. The current implementation does not adequately limit the depth of the resulting tree, potentially allowing for recursion depths of approximately 500 or more. This can lead to system instability or crashes, as the kernel may exhaust its stack space due to excessive recursion.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch by updating the Linux kernel to the latest version.
Conclusion
The eventpoll recursion depth vulnerability in the Linux kernel poses a significant risk to system stability. It is essential for users of affected Debian versions to update their systems promptly to mitigate this risk. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The vulnerability allows for semi-unbounded recursion in the eventpoll subsystem, potentially leading to system crashes.
Debian versions 11, 12, 13, and 14 are all affected by this vulnerability.
You can use the Vulert platform to check if your application is affected by this vulnerability without needing to install any software.
Yes, a patch is available. Updating the Linux package to the latest version will resolve the vulnerability.
While there are no specific workarounds, it is crucial to monitor your system for unusual behavior and plan for an update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
