CVE-2011-1044: Low severity Linux Linux kernel vulnerability
Last updated 24 July 2024
Other sources
The ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:2.6.33.7-rt29.55.el5 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:2.6.18-238.19.1.el5 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:2.6.32-71.29.1.el6 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 2.6.37
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2011-1044?
CVE-2011-1044 has a medium severity rating as it allows local users to access potentially sensitive information from kernel memory.
How do I fix CVE-2011-1044?
To fix CVE-2011-1044, upgrade to a kernel version that is equal to or greater than 2.6.37.
Which Linux versions are affected by CVE-2011-1044?
CVE-2011-1044 affects Linux kernel versions prior to 2.6.37.
Is CVE-2011-1044 present in Red Hat Enterprise Linux?
Yes, CVE-2011-1044 is present in several versions of Red Hat Enterprise Linux before the specified remediation versions.
Can Debian systems be impacted by CVE-2011-1044?
Yes, Debian systems using the affected kernel versions could also be vulnerable to CVE-2011-1044.