CVE-2012-6542 describes an information disclosure vulnerability in the Linux kernel's llc_ui_getname function (net/llc/af_llc.c) before version 3.6, affecting various Linux distributions including Red Hat Enterprise Linux. This flaw allows local users to extract sensitive data from kernel stack memory due to an incorrect return value and an uninitialized pointer. The vulnerability has a low CVSS score of 1.9 (AV:L/AC:M/Au:N/C:P/I:N/A:N), indicating a local attack vector with medium complexity, leading to partial confidentiality impact but no integrity or availability impact. Its FAUCET Risk Score is 5/100, suggesting minimal immediate risk. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and it is not listed in the KEV catalog. Community discussion and media coverage are absent, consistent with the majority of CVEs.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.5.7CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:M/Au:N/C:P/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.