CVE-2011-0695

EUVD-2011-0713
Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer dereference.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.7 UNKNOWN
ADJACENT_NETWORK
MEDIUM
AV:A/AC:M/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
2.6.0 ≤
𝑥
≤ 2.6.39.4
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_eus
5.6
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server_aus
5.6
redhatenterprise_linux_workstation
5.0
canonicalubuntu_linux
8.04
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
dapper
dne
hardy
Fixed 2.6.24-29.90
released
karmic
ignored
lucid
Fixed 2.6.32-32.62
released
maverick
Fixed 2.6.35-29.51
released
natty
Fixed 2.6.38-8.40
released
linux-ec2
dapper
dne
hardy
dne
karmic
ignored
lucid
Fixed 2.6.32-316.30
released
maverick
ignored
natty
dne
linux-fsl-imx51
dapper
dne
hardy
dne
karmic
ignored
lucid
Fixed 2.6.31-609.26
released
maverick
dne
natty
dne
linux-lts-backport-maverick
dapper
dne
hardy
dne
karmic
dne
lucid
Fixed 2.6.35-30.54~lucid1
released
maverick
dne
natty
dne
linux-lts-backport-natty
hardy
dne
lucid
not-affected
maverick
dne
natty
dne
linux-mvl-dove
dapper
dne
hardy
dne
karmic
ignored
lucid
Fixed 2.6.32-217.34
released
maverick
Fixed 2.6.32-417.34
released
natty
dne
linux-source-2.6.15
dapper
Fixed 2.6.15-57.97
released
hardy
dne
karmic
dne
lucid
dne
maverick
dne
natty
dne
linux-ti-omap4
dapper
dne
hardy
dne
karmic
dne
lucid
dne
maverick
Fixed 2.6.35-903.23
released
natty
Fixed 2.6.38-1208.11
released