CVE-2012-6536

CVE-2012-6536 is a local information disclosure vulnerability affecting the Linux kernel before version 3.6. It stems from a flaw in net/xfrm/xfrm_user.c where the kernel fails to validate the Netlink message length against a header field. This allows local users with CAP_NET_ADMIN privileges to extract sensitive information from kernel heap memory. The vulnerability has a low severity score (CVSS 2.1) due to its local attack vector and requires specific administrative capabilities, with the only impact being potential information disclosure. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.