CVE-2014-9529: Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2...

Security readout for executives and security teams

CVE-2014-9529 is a Linux kernel bug where a local user could trigger a race in kernel key-management cleanup. The documented business impact is system crash or memory corruption, causing denial of service. The source bundle does not show remote exploitation or confirmed active exploitation. Exposure is most relevant on Linux systems running kernels through 3.18.2, or distribution kernels without the vendor backport. Risk is higher where untrusted users, tenants, or compromised low-privilege accounts can run local processes. Handle through normal kernel patch governance, with faster action for shared or multi-user systems. The main business risk is local denial of service on affected Linux hosts, not a documented remote compromise path. Mitigation focus: Apply the relevant vendor kernel security update for each Linux distribution.; Confirm systems boot into the fixed kernel after updating.; Prioritize shared, multi-user, and externally managed Linux hosts..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.