CVE-2012-6543: The l2tp_ip6_getname function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.6 does not initialize a c...

Security readout for executives and security teams

This is an old Linux kernel information leak. A local user could run a crafted application that causes the kernel to return data from stack memory. The issue is not described as remotely exploitable, and the provided sources do not show active exploitation. Exposure is most likely on legacy Linux systems running kernels before 3.6, or vendor kernels missing the backported fix. Modern supported distributions are likely patched, but appliances or embedded systems may still carry old kernels. Prioritize as legacy exposure cleanup. It is less urgent than remotely exploitable or KEV-listed issues, but unpatched old kernels indicate broader operational risk and may compound other local attack paths. Mitigation focus: Upgrade to Linux kernel 3.6 or later where feasible.; Confirm distro kernels include the upstream backported fix.; Check vendor advisories for supported appliances and embedded Linux builds..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.