CVE-2012-6689: High severity linux kernel vulnerability
Florian Weimer of the Red Hat Product Security Team discovere that the mnlnlmsgportidok() function in libmnl 1.0.3 and earlier did not correctly validate the origin of a Netlink message, allowing local attackers to spoof Netlink messages, with context-dependent consequences.
Other sources
The netlinksendmsg function in net/netlink/afnetlink.c in the Linux kernel before 3.5.5 does not validate the dstpid field, which allows local users to have an unspecified impact by spoofing Netlink messages.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6689?
CVE-2012-6689 has a medium severity level due to the potential for local attackers to spoof Netlink messages.
How do I fix CVE-2012-6689?
To fix CVE-2012-6689, upgrade to libmnl version 1.0.4 or later, or apply patches as recommended by your distribution.
Which systems are affected by CVE-2012-6689?
CVE-2012-6689 affects versions of libmnl up to and including 1.0.3, as well as various versions of the Linux kernel.
What are the consequences of CVE-2012-6689?
The consequences of CVE-2012-6689 can vary, but may include unauthorized actions due to spoofed Netlink messages.
Is CVE-2012-6689 exploitable remotely?
CVE-2012-6689 is not remotely exploitable as it requires local access to the system.