CVE-2012-6549: The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize...

Security readout for executives and security teams

CVE-2012-6549 is an old Linux kernel information leak. A local user or locally running application could cause the ISO filesystem export code to disclose data from kernel heap memory. It is not described as remote code execution, and the provided sources do not show active exploitation. Exposure is most likely on systems running Linux kernels older than 3.6, or vendor-maintained kernels lacking the backported fix. The source bundle does not provide precise affected distributions or package versions beyond vendor advisories. Treat this as a moderate-priority legacy kernel hygiene issue. It can expose sensitive kernel memory locally, but the source bundle does not show remote exploitation or active abuse. Patch during normal vulnerability remediation, accelerating for shared or multi-tenant Linux systems. Mitigation focus: Apply the relevant vendor kernel updates from Ubuntu, openSUSE, Mandriva, or your Linux distributor.; Confirm the running kernel includes the upstream fix or an equivalent vendor backport.; Prioritize shared servers, multi-user systems, and hosts running untrusted local workloads..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.