CVE-2011-0695

MediumCVSS 5.7/10Last modified Jun 16, 2026

Description

Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer dereference.

Metrics

CVSS 2.0 5.7/10AV:A/AC:M/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://rhn.redhat.com/errata/RHSA-2011-0927.htmlThird Party Advisory
http://secunia.com/advisories/43693Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/03/11/1Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/46839Third Party Advisory, VDB Entry
http://www.spinics.net/lists/linux-rdma/msg07447.htmlExploit, Mailing List, Patch, Third Party Advisory
http://www.spinics.net/lists/linux-rdma/msg07448.htmlMailing List, Patch, Third Party Advisory
http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66056Third Party Advisory, VDB Entry
http://rhn.redhat.com/errata/RHSA-2011-0927.htmlThird Party Advisory
http://secunia.com/advisories/43693Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/03/11/1Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/46839Third Party Advisory, VDB Entry
http://www.spinics.net/lists/linux-rdma/msg07447.htmlExploit, Mailing List, Patch, Third Party Advisory
http://www.spinics.net/lists/linux-rdma/msg07448.htmlMailing List, Patch, Third Party Advisory
http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66056Third Party Advisory, VDB Entry

Timeline

Published: Mar 15, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-06966.8Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which mak CVE-2011-06974.3Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrar CVE-2011-06987.5Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or exe CVE-2011-06997.0Integer signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows local users to cause a denial of service (CVE-2011-07003.5Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web scrip CVE-2011-07014.0wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) p CVE-2011-07023.3The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack o CVE-2011-07039.8In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrato CVE-2011-07045.9389 Directory Server 1.2.7.5, when built with mozldap, allows remote attackers to cause a denial of service (replica crash) by sending an em CVE-2011-07067.5The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privile CVE-2011-07074.3Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arb CVE-2011-07084.3exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a de