CVE-2012-6538
LOW—CVSS v3
1.9CVSS v2
0.08%
EPSS (exploit probability)
CWE-200CWE
Description
The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a string, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability.
Affected routers (0)
No routers currently mapped to this CVE in our database.