CVE-2013-3230

CVE-2013-3230 is a local information disclosure vulnerability affecting the Linux kernel before version 3.9-rc7. It stems from an uninitialized structure member in the l2tp_ip6_recvmsg function, allowing local users to extract sensitive information from kernel stack memory. With a CVSS score of 4.9, this vulnerability is of low severity, requiring local access and low attack complexity to achieve a complete confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low likelihood of real-world exploitation.