CVE-2011-1044: Low severity linux kernel vulnerability
Last updated 24 July 2024
Other sources
The ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2011-1044?
CVE-2011-1044 has a medium severity rating as it allows local users to access potentially sensitive information from kernel memory.
How do I fix CVE-2011-1044?
To fix CVE-2011-1044, upgrade to a kernel version that is equal to or greater than 2.6.37.
Which Linux versions are affected by CVE-2011-1044?
CVE-2011-1044 affects Linux kernel versions prior to 2.6.37.
Is CVE-2011-1044 present in Red Hat Enterprise Linux?
Yes, CVE-2011-1044 is present in several versions of Red Hat Enterprise Linux before the specified remediation versions.
Can Debian systems be impacted by CVE-2011-1044?
Yes, Debian systems using the affected kernel versions could also be vulnerable to CVE-2011-1044.