CVE:CVE-2011-1044
CNNVD:CNNVD-201102-283
Linux Kernel 是开放源码操作系统Linux所使用的内核。
Linux kernel 2.6.37之前版本的drivers/infiniband/core/uverbs_cmd.c文件中的ib_uverbs_poll_cq函数中存在缓冲区溢出漏洞。本地用户可以借助导致缓冲区仅被部分填充的向量，从内核栈内存中获取潜在敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 2.6.37,and avoid the version (,2.6.37); Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_eus to a higher version than 5.6,and avoid the version 5.6; Upgrade redhat enterprise_linux_server to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 5.6,and avoid the version 5.6; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,and avoid the version 5.0