|Date: (C)2011-03-15 (M)2017-08-18|
|CVSS Score: 5.7||Access Vector: ADJACENT_NETWORK|
|Exploitability Subscore: 5.5||Access Complexity: MEDIUM|
|Impact Subscore: 6.9||Authentication: NONE|
| ||Confidentiality: NONE|
| ||Integrity: NONE|
| ||Availability: COMPLETE|
Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer dereference.