CVE-2012-6546: The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows...

Security readout for executives and security teams

CVE-2012-6546 is a Linux kernel information leak in the ATM networking code. A person who can run a local application on an affected system may read sensitive data left in kernel stack memory. The source bundle does not show remote exploitation or confirmed active exploitation. Exposure is most relevant to Linux systems running kernels before 3.6 or vendor kernels carrying the vulnerable ATM implementation. Risk is higher on multi-user servers, shared hosting, build runners, or systems allowing untrusted local code execution. Treat as a targeted maintenance priority, not an internet-wide emergency. Patch shared or multi-user Linux systems first because local information leaks can support broader attack chains when attackers already have code execution. Mitigation focus: Update affected Linux kernels using the relevant vendor security advisory or supported package channel.; Prioritize multi-user and shared-execution Linux hosts before single-purpose appliances.; Consult Ubuntu USN-1805-1, USN-1808-1, or Red Hat RHSA-2013:0744 where applicable..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.