CVE-2012-6689: The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate...

Security readout for executives and security teams

This is an old Linux kernel flaw where a local user could spoof certain Netlink messages because the kernel did not validate a destination process ID field. The business risk depends heavily on whether untrusted local users or workloads can run on affected systems. The source bundle does not define the impact beyond “unspecified.” Exposure is most plausible on systems running Linux kernels older than 3.5.5, or vendor kernels lacking the upstream backport. Risk is higher on multi-user hosts, shared build systems, hosting platforms, and systems running untrusted local workloads. Treat this as a legacy local-kernel exposure management item, not an internet-facing emergency based on the supplied evidence. Prioritize patch confirmation for shared or untrusted workload environments and retire unsupported kernels. Mitigation focus: Inventory Linux kernel versions across servers, appliances, and container hosts.; Upgrade to a vendor-supported kernel containing the upstream Netlink validation fix.; Check distribution advisories for backported fixes instead of relying only on version numbers..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.