CVE:CVE-2010-4649
CNNVD:CNNVD-201102-287
Linux Kernel 是开放源码操作系统Linux所使用的内核。
Linux kernel 2.6.37之前版本中的drivers/infiniband/core/uverbs_cmd.c文件中的ib_uverbs_poll_cq中存在整数溢出漏洞。本地用户可以借助某个结构体成员的超大值导致拒绝服务（内存破坏）或者可能产生其他未明影响。
solution:Upgrade linux linux_kernel to a higher version than 2.6.37,and avoid the version (,2.6.37); Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_eus to a higher version than 5.6,and avoid the version 5.6; Upgrade redhat enterprise_linux_server to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 5.6,and avoid the version 5.6; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,and avoid the version 5.0