CVE-2012-6549

CVE-2012-6549 describes an information disclosure vulnerability in the Linux kernel, specifically affecting versions before 3.6. The flaw resides in the isofs_export_encode_fh function, where an uninitialized structure member allows local users to extract sensitive data from kernel heap memory. With a CVSS score of 1.9, this vulnerability is considered low severity, requiring local access and medium attack complexity to achieve a partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.