The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-xen | Dec 1, 2016 | Feb 18, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 18, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 8, 2010 |
| Suse | — | Upgrade kernel-kdumppaeUpgrade kernel-sourceUpgrade kernel-vmiUpgrade kernel-ppc64Upgrade kernel-vmipaeUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-smpUpgrade kernel-xenpaeUpgrade kernel-kdumpUpgrade kernel-iseries64Upgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-bigsmp | Feb 17, 2015 | Feb 18, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-29-sparc64Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-29-386Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.32-29-powerpc-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-29-versatileUpgrade linux-image-2.6.32-29-sparc64-smpUpgrade linux-image-2.6.32-29-generic-paeUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-29-serverUpgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.32-29-preemptUpgrade linux-image-2.6.32-29-lpiaUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-29-powerpc64-smpUpgrade linux-image-2.6.32-313-ec2Upgrade linux-image-2.6.32-29-genericUpgrade linux-image-2.6.32-29-powerpcUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.32-29-ia64Upgrade linux-image-2.6.32-29-virtualUpgrade linux-image-2.6.24-29-generic | Nov 8, 2024 | Feb 18, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 18, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub