CVE-2012-6689 in Kernel
Summary
The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid field, which allows local users to have an unspecified impact by spoofing Netlink messages.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
02/27/2015
Disclosure
05/02/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 83131 | Linux Kernel af_netlink.c netlink_sendmsg access control | 284 | Not defined | Official fix | CVE-2012-6689 |