CVE-2012-2669

Priority
Medium
Description
The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed
in the Linux kernel before 3.4.5, does not validate the origin of Netlink
messages, which allows local users to spoof Netlink communication via a
crafted connector message.
Ubuntu-Description
It was discovered that hypervkvpd, which is distributed in the Linux
kernel, was not correctly validating the origin on Netlink messages. An
untrusted local user can cause a denial of service of Linux guests in
Hyper-V virtualization environments.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2669
https://bugzilla.novell.com/show_bug.cgi?id=761200
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=bcc2c9c3fff859e0eb019fe6fec26f9b8eba795c
https://github.com/torvalds/linux/commit/bcc2c9c3fff859e0eb019fe6fec26f9b8eba795c
http://www.openwall.com/lists/oss-security/2012/11/27/12
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5
http://openwall.com/lists/oss-security/2012/06/06/12
http://www.ubuntu.com/usn/usn-1529-1
http://www.ubuntu.com/usn/usn-1514-1
http://www.ubuntu.com/usn/usn-1719-1
http://www.ubuntu.com/usn/usn-1720-1
http://www.ubuntu.com/usn/usn-1726-1
Bugs
https://launchpad.net/bugs/1096318
Package
Source: linux-armadaxp (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-1606.9)
Ubuntu 12.10 (Quantal Quetzal):not-affected (3.5.0-1600.1)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-ec2 (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):not-affected
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-backport-oneiric (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):released (3.0.0-31.48~lucid1)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-linaro-shared (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-linaro-vexpress (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-qcm-msm (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-quantal (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):pending (3.5.0-2.2~precise1)
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Patches:
Package
Source: linux-mvl-dove (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-backport-maverick (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):not-affected
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-28.44)
Ubuntu 12.10 (Quantal Quetzal):pending (3.5.0-2.2)
Ubuntu 13.04 (Raring Ringtail):not-affected (3.7.0-0.1)
Ubuntu 13.10 (Saucy Salamander):not-affected (3.7.0-0.1)
Patches:
Introduced by cc04acf53fb1bba1e57b0d34a400ccaf498fc9beFixed by bcc2c9c3fff859e0eb019fe6fec26f9b8eba795c
Package
Source: linux-ti-omap4 (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-1417.23)
Ubuntu 12.10 (Quantal Quetzal):pending (3.5.0-207.13)
Ubuntu 13.04 (Raring Ringtail):not-affected
Ubuntu 13.10 (Saucy Salamander):not-affected
Package
Source: linux-linaro-omap (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-fsl-imx51 (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life, does not affect buildd)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-raring (LP Ubuntu Debian)
Upstream:released (3.5~rc4)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):not-affected
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
More Information

Valid XHTML 1.0 Strict

Updated: 2013-05-10 19:14:39 UTC (commit 6828)