CVE-2011-0695

Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer dereference.

• CWE-362

• http://rhn.redhat.com/errata/RHSA-2011-0927.htmlThird Party Advisory
• http://secunia.com/advisories/43693Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/03/11/1Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/46839Third Party Advisory, VDB Entry
• http://www.spinics.net/lists/linux-rdma/msg07447.htmlExploit, Mailing List, Patch, Third Party Advisory
• http://www.spinics.net/lists/linux-rdma/msg07448.htmlMailing List, Patch, Third Party Advisory
• http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66056Third Party Advisory, VDB Entry
• http://rhn.redhat.com/errata/RHSA-2011-0927.htmlThird Party Advisory
• http://secunia.com/advisories/43693Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/03/11/1Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/46839Third Party Advisory, VDB Entry
• http://www.spinics.net/lists/linux-rdma/msg07447.htmlExploit, Mailing List, Patch, Third Party Advisory
• http://www.spinics.net/lists/linux-rdma/msg07448.htmlMailing List, Patch, Third Party Advisory
• http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66056Third Party Advisory, VDB Entry

Published

Mar 15, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0684Opera before 11.01 does not properly handle redirections and…
• CVE-2011-0685The Delete Private Data feature in Opera before 11.01 does n…
• CVE-2011-0686Unspecified vulnerability in Opera before 11.01 allows remot…
• CVE-2011-0687Opera before 11.01 does not properly implement Wireless Appl…
• CVE-2011-0688Intel Alert Management System (aka AMS or AMS2), as used in …
• CVE-2011-0694RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.…
• CVE-2011-0696Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not pr…
• CVE-2011-0697Cross-site scripting (XSS) vulnerability in Django 1.1.x bef…
• CVE-2011-0698Directory traversal vulnerability in Django 1.1.x before 1.1…
• CVE-2011-0699Integer signedness error in the btrfs_ioctl_space_info funct…7
• CVE-2011-0700Multiple cross-site scripting (XSS) vulnerabilities in WordP…
• CVE-2011-0701wp-admin/async-upload.php in the media uploader in WordPress…