CVE-2010-2522: Linux-IPv6 Umip

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message.

Affected products

• Linux-IPv6 Umip: version 0.4 only

Published 2010-07-13. Last modified 2026-06-16.