CVE ID:	CVE-2011-0695
Description:	Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer dereference.
Test IDs:	1.3.6.1.4.1.25623.1.0.69807   1.3.6.1.4.1.25623.1.0.69426   1.3.6.1.4.1.25623.1.0.69641   1.3.6.1.4.1.25623.1.1.1.1.2011.2240   1.3.6.1.4.1.25623.1.0.69970
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0695 43693 http://secunia.com/advisories/43693 46839 http://www.securityfocus.com/bid/46839 RHSA-2011:0927 http://rhn.redhat.com/errata/RHSA-2011-0927.html USN-1146-1 http://www.ubuntu.com/usn/USN-1146-1 [linux-rdma] 20110223 [PATCH 1/2] rdma/cm: Fix crash in request handlers http://www.spinics.net/lists/linux-rdma/msg07447.html [linux-rdma] 20110223 [PATCH 2/2] ib/cm: Bump reference count on cm_id before invoking callback http://www.spinics.net/lists/linux-rdma/msg07448.html [oss-security] 20110311 CVE-2011-0695 kernel: panic in ib_cm:cm_work_handler http://www.openwall.com/lists/oss-security/2011/03/11/1 kernel-infiniband-dos(66056) https://exchange.xforce.ibmcloud.com/vulnerabilities/66056