CVE-2011-1044: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.

Affected products

• Linux Linux Kernel: before 2.6.37 (fixed in 2.6.37)
• Red Hat Enterprise Linux Desktop: version 5.0 only
• Red Hat Enterprise Linux Eus: version 5.6 only
• Red Hat Enterprise Linux Server: version 5.0 only
• Red Hat Enterprise Linux Server Aus: version 5.6 only
• Red Hat Enterprise Linux Workstation: version 5.0 only

Published 2011-02-18. Last modified 2026-06-16.