CVE-2012-6540

CVE-2012-6540 describes an information disclosure vulnerability in the Linux kernel (before version 3.6) affecting the do_ip_vs_get_ctl function. A local attacker can exploit this by sending a crafted IP_VS_SO_GET_TIMEOUT command, leading to the leakage of sensitive data from kernel stack memory due to an uninitialized structure. With a CVSS score of 1.9 (low severity), this vulnerability requires local access and medium attack complexity, resulting in a partial confidentiality impact without affecting integrity or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.