CVE-2010-4649: Linux Kernel

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large value of a certain structure member.

Affected products

• Linux Linux Kernel: before 2.6.37 (fixed in 2.6.37)
• Red Hat Enterprise Linux Desktop: version 5.0 only
• Red Hat Enterprise Linux Eus: version 5.6 only
• Red Hat Enterprise Linux Server: version 5.0 only
• Red Hat Enterprise Linux Server Aus: version 5.6 only
• Red Hat Enterprise Linux Workstation: version 5.0 only

Published 2011-02-18. Last modified 2026-06-16.