CVE-2012-6538: The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C l...

Security readout for executives and security teams

This is a Linux kernel information disclosure issue. A local user with CAP_NET_ADMIN could cause the kernel to expose sensitive heap memory. The sources do not show remote exploitation, active exploitation, or a CVSS score. Exposure is most likely on systems running Linux kernels before 3.6, or vendor kernels without the backported fix, where local users or processes can obtain CAP_NET_ADMIN. Treat this as a targeted hygiene issue, not an internet-wide emergency. Patch affected legacy kernels and reduce unnecessary CAP_NET_ADMIN exposure, especially on shared systems. Mitigation focus: Upgrade to Linux kernel 3.6 or a vendor kernel containing the backported fix.; Review Red Hat or distribution-specific advisories for fixed package versions.; Limit CAP_NET_ADMIN to trusted users and processes only..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.