The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 27, 2012 |
| Suse | — | Upgrade hyper-v | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-29-omapUpgrade linux-image-3.0.0-31-powerpcUpgrade linux-image-3.2.0-29-highbankUpgrade linux-image-3.0.0-31-powerpc-smpUpgrade linux-image-3.0.0-31-virtualUpgrade linux-image-3.0.0-31-powerpc64-smpUpgrade linux-image-3.2.0-29-generic-paeUpgrade linux-image-3.0.0-31-generic-paeUpgrade linux-image-3.0.0-31-genericUpgrade linux-image-3.2.0-29-genericUpgrade linux-image-3.2.0-29-powerpc-smpUpgrade linux-image-3.2.0-29-virtualUpgrade linux-image-3.0.0-1221-omap4Upgrade linux-image-3.2.0-1417-omap4Upgrade linux-image-3.0.0-31-serverUpgrade linux-image-3.2.0-29-powerpc64-smpUpgrade linux-image-3.0.0-31-omap | Nov 8, 2024 | Dec 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub