Lucene search

K
prionPRIOn knowledge basePRION:CVE-2011-1044
HistoryFeb 18, 2011 - 8:00 p.m.

Design/Logic Flaw

2011-02-1820:00:00
PRIOn knowledge base
www.prio-n.com
5

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.