CVE-2014-9683: Off-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the eCryptfs subs...

Security readout for executives and security teams

This is a Linux kernel eCryptfs bug where a crafted filename can corrupt memory by one byte. A local user could crash the system and may be able to gain higher privileges. It affects kernels before 3.18.2, with multiple Linux vendor advisories referenced. Exposure is most relevant on Linux systems using kernels before 3.18.2 or vendor kernels lacking the backported fix, especially where untrusted local users can create filenames on eCryptfs-backed paths. Treat this as a patch-priority kernel issue for shared Linux environments. It is not described as remotely exploitable, but local denial of service and possible privilege escalation make delayed remediation risky where users or workloads are not fully trusted. Mitigation focus: Apply the relevant vendor kernel security update for affected distributions.; Ensure kernels include the upstream fix present by Linux 3.18.2.; Prioritize shared systems with local shell, hosting, or multi-user access..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.