CVE-2010-4649: Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux ker...

Security readout for executives and security teams

CVE-2010-4649 is an old Linux kernel flaw where a local user could trigger memory corruption in an InfiniBand-related kernel function. The documented impact is denial of service, with unspecified other impact possible. It is not described as remotely exploitable in the provided sources. Likely exposure is limited to systems running Linux kernels before 2.6.37 or vendor kernels without the backported fix, especially where InfiniBand userspace verbs are available. The source bundle does not enumerate distributions beyond the Red Hat advisory reference. Treat this as a legacy Linux hygiene issue unless vulnerable kernels remain in production. Prioritize remediation where shared-user access, HPC, or InfiniBand/RDMA environments still run old or vendor-unverified kernels. Mitigation focus: Upgrade to Linux kernel 2.6.37 or a vendor kernel containing the backported fix.; Review RHSA-2011:0927 if managing affected Red Hat systems.; Check current vendor advisories for supported legacy distributions..

Prepared

Jun 27, 2026, 18:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.