The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-xen | Dec 1, 2016 | Feb 18, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Feb 18, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 8, 2010 |
| Suse | — | Upgrade kernel-vmiUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-smpUpgrade kernel-sourceUpgrade kernel-kdumppaeUpgrade kernel-ppc64Upgrade kernel-vmipaeUpgrade kernel-kdumpUpgrade kernel-xenpaeUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-bigsmpUpgrade kernel-iseries64 | Feb 17, 2015 | Feb 18, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-29-sparc64Upgrade linux-image-2.6.32-29-386Upgrade linux-image-2.6.32-29-powerpc-smpUpgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.32-29-versatileUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.32-29-sparc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-29-ia64Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-29-generic-paeUpgrade linux-image-2.6.32-313-ec2Upgrade linux-image-2.6.32-29-powerpc64-smpUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-29-preemptUpgrade linux-image-2.6.32-29-serverUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-29-lpiaUpgrade linux-image-2.6.32-29-powerpcUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.32-29-genericUpgrade linux-image-2.6.32-29-virtualUpgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.35-27-omap | Nov 8, 2024 | Feb 18, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 18, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub