CVE-2012-6547

CVE-2012-6547 describes an information disclosure vulnerability in the Linux kernel's tun.c driver, affecting versions prior to 3.6. A local attacker can exploit an uninitialized structure in the __tun_chr_ioctl function to leak sensitive data from kernel stack memory. This low-severity vulnerability has a CVSS score of 1.9, requiring local access and moderate attack complexity to achieve partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.