The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-PAE-devel | Dec 1, 2016 | Feb 18, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Feb 18, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 8, 2010 |
| Suse | — | Upgrade kernel-kdumppaeUpgrade kernel-vmipaeUpgrade kernel-sourceUpgrade kernel-vmiUpgrade kernel-smpUpgrade kernel-xenUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-iseries64Upgrade kernel-kdumpUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-bigsmpUpgrade kernel-xenpae | Feb 17, 2015 | Feb 18, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.32-29-versatileUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-29-sparc64Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.32-29-powerpc-smpUpgrade linux-image-2.6.32-29-386Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.32-29-powerpcUpgrade linux-image-2.6.32-29-virtualUpgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-29-serverUpgrade linux-image-2.6.32-29-ia64Upgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.32-29-generic-paeUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-29-preemptUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.32-313-ec2Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-29-powerpc64-smpUpgrade linux-image-2.6.32-29-lpiaUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-29-sparc64-smpUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-29-generic | Nov 8, 2024 | Feb 18, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 18, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub