#VU92526 Information exposure in Linux kernel - CVE-2012-6537

Vulnerability identifier: #VU92526

Vulnerability risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2012-6537

CWE-ID: CWE-200

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to information exposure error within the copy_to_user_tmpl() function in net/xfrm/xfrm_user.c. A local user can gain access to sensitive information.

Mitigation
Install update from vendor's repository.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1f86840f897717f86d523a13e99a447e6a5d2fa5
https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7b789836f434c87168eab067cfbed1ec4783dffd
https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f778a636713a435d3a922c60b1622a91136560c1
https://rhn.redhat.com/errata/RHSA-2013-0744.html
https://www.openwall.com/lists/oss-security/2013/03/05/13
https://www.ubuntu.com/usn/USN-1792-1
https://www.ubuntu.com/usn/USN-1798-1
https://github.com/torvalds/linux/commit/1f86840f897717f86d523a13e99a447e6a5d2fa5
https://github.com/torvalds/linux/commit/7b789836f434c87168eab067cfbed1ec4783dffd
https://github.com/torvalds/linux/commit/f778a636713a435d3a922c60b1622a91136560c1
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.