CVE-2012-3520: The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SC...

Security readout for executives and security teams

CVE-2012-3520 is an old Linux kernel flaw where local users could send Netlink messages without expected credential data and potentially impersonate trusted Netlink communication. The cited examples are Avahi and NetworkManager. It matters mainly for legacy Linux systems or long-lived appliances running kernels before the fixed 3.2.30 lineage or unfixed vendor backports. Exposure is most likely on legacy Linux systems, embedded appliances, or unsupported distributions with old or vendor-unfixed kernels. Systems require local user access for the described impact, reducing internet-wide urgency but increasing concern on shared hosts. Treat as a legacy exposure issue, not a current internet emergency. Prioritize remediation where old Linux kernels remain in production, especially shared servers, appliances, or environments with local untrusted users. Mitigation focus: Update affected Linux kernels using the relevant vendor advisory or a fixed kernel lineage.; Prioritize shared Linux hosts where untrusted local users can run code.; Check vendor guidance for supported backported fixes on distribution kernels..

Prepared

Jun 27, 2026, 16:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.