CVE-2012-2669

Published: 27 December 2012

The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message.

From the Ubuntu security team

It was discovered that hypervkvpd, which is distributed in the Linux kernel, was not correctly validating the origin on Netlink messages. An untrusted local user can cause a denial of service of Linux guests in Hyper-V virtualization environments.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2669
• https://bugzilla.novell.com/show_bug.cgi?id=761200
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=bcc2c9c3fff859e0eb019fe6fec26f9b8eba795c
• https://github.com/torvalds/linux/commit/bcc2c9c3fff859e0eb019fe6fec26f9b8eba795c
• http://www.openwall.com/lists/oss-security/2012/11/27/12
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5
• http://openwall.com/lists/oss-security/2012/06/06/12
• https://ubuntu.com/security/notices/USN-1529-1
• https://ubuntu.com/security/notices/USN-1514-1
• https://ubuntu.com/security/notices/USN-1719-1
• https://ubuntu.com/security/notices/USN-1720-1
• https://ubuntu.com/security/notices/USN-1726-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1096318