National Cyber Awareness System

Vulnerability Summary for CVE-2011-0695

Overview

Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer dereference.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: MLIST

Name: [linux-rdma] 20110223 [PATCH 2/2] ib/cm: Bump reference count on cm_id before invoking callback

Type: Patch Information

Hyperlink:http://www.spinics.net/lists/linux-rdma/msg07448.html

External Source: MLIST

Name: [linux-rdma] 20110223 [PATCH 1/2] rdma/cm: Fix crash in request handlers

Type: Patch Information; Exploit

Hyperlink:http://www.spinics.net/lists/linux-rdma/msg07447.html

External Source: MLIST

Name: [oss-security] 20110311 CVE-2011-0695 kernel: panic in ib_cm:cm_work_handler

Type: Patch Information; Exploit

Hyperlink:http://www.openwall.com/lists/oss-security/2011/03/11/1

External Source: XF

Name: kernel-infiniband-dos(66056)

Hyperlink:http://xforce.iss.net/xforce/xfdb/66056

External Source: UBUNTU

Name: USN-1146-1

Hyperlink:http://www.ubuntu.com/usn/USN-1146-1

External Source: BID

Name: 46839

Hyperlink:http://www.securityfocus.com/bid/46839

External Source: SECUNIA

Name: 43693

Type: Advisory

Hyperlink:http://secunia.com/advisories/43693