CVE-2011-3145: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

Security readout for executives and security teams

This is a local, low-severity eCryptfs issue. A user running mount.ecryptfs_private could cause a temporary replacement for /etc/mtab to be created with that user’s primary group ownership, potentially affecting availability rather than exposing data or enabling remote compromise. Exposure is limited to systems using affected eCryptfs mount.ecryptfs_private versions where local users can invoke private encrypted home mounting. The bundle does not identify affected products beyond the eCryptfs/Ubuntu version reference. Treat this as routine maintenance unless the organization operates shared Linux systems with untrusted local users. It is not a remote compromise issue, and the public evidence does not show active exploitation. Mitigation focus: Check vendor guidance for the distribution-provided eCryptfs package.; Upgrade affected mount.ecryptfs_private packages to a fixed vendor version where available.; Prioritize multi-user systems where untrusted local users can run eCryptfs private mounts..

Prepared

Jun 1, 2026, 14:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.