CVE-2012-5532: Medium severity linux kernel vulnerability
Florian Weimer of the Red Hat Product Security Team discovered that hypervkvpd would exit when it processed a spoofed Netlink packet that had been sent from an untrusted local user, in the following code:
len = recvfrom(fd, kvprecvbuffer, sizeof(kvprecvbuffer), 0, addrp, &addrl);
if (len < 0 || addr.nlpid) { syslog(LOGERR, "recvfrom failed; pid:%u error:%d %s", addr.nlpid, errno, strerror(errno)); close(fd); return -1; }
Acknowledgements:
This issue was discovered by Florian Weimer of the Red Hat Product Security Team.
Other sources
The main function in tools/hv/hvkvpdaemon.c in hypervkvpd, as distributed in the Linux kernel before 3.8-rc1, allows local users to cause a denial of service (daemon exit) via a crafted application that sends a Netlink message. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-2669.
— Debian
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5532?
CVE-2012-5532 has been classified with a severity level that indicates potential denial of service risks.
How do I fix CVE-2012-5532?
To fix CVE-2012-5532, ensure you apply available patches or upgrade to a secure version of the Linux Kernel that addresses the vulnerability.
What systems are affected by CVE-2012-5532?
CVE-2012-5532 affects various versions of the Linux Kernel, particularly those up to version 3.7.1.
What are the potential impacts of CVE-2012-5532?
Exploitation of CVE-2012-5532 can lead to unexpected crashes or system instability.
Who discovered CVE-2012-5532 and when?
Florian Weimer of the Red Hat Product Security Team discovered CVE-2012-5532.