tocsin

Debian/linux: high 7.8

The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid field, which allows local users to have an unspecified impact by spoofing Netlin

Action: Upgrade linux to 3.6.4-1 or later.

Affected

introducedfixedlast affected
03.6.4-1-

Fixed versions

3.6.4-1

Sources

published · modified · JSON