CVE-2011-2492

CVE-2011-2492 describes an information disclosure vulnerability in the Bluetooth subsystem of the Linux kernel prior to version 3.0-rc4, also affecting Red Hat distributions. This flaw, related to improper data structure initialization in l2cap_sock_getsockopt_old and rfcomm_sock_getsockopt_old functions, allows local users to potentially extract sensitive kernel memory information via a crafted getsockopt system call. The vulnerability has a low CVSS score of 1.9, indicating a local attack vector with medium complexity and a partial impact on confidentiality, but no impact on integrity or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.