CVE-2012-6545: The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain str...

Security readout for executives and security teams

CVE-2012-6545 is an old Linux kernel Bluetooth RFCOMM information leak. A local user could run a crafted application and read sensitive data from uninitialized kernel memory. The sources do not show remote access, privilege escalation by itself, or active exploitation. Exposure is most likely on legacy Linux systems running kernels before 3.6 or old vendor kernels without the referenced backports, especially where local users can execute applications and Bluetooth RFCOMM is present. Treat this as a legacy exposure cleanup item unless unsupported Linux kernels remain in production. Business urgency increases on shared systems where untrusted local users or applications can run code. Mitigation focus: Upgrade to Linux kernel 3.6 or a vendor kernel containing the referenced fixes.; Apply relevant Ubuntu, Red Hat, or distribution security updates for affected kernels.; Check current vendor guidance for exact fixed package versions..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.