CVE-2014-9730: The udf_pc_to_char function in fs/udf/symlink.c in the Linux kernel before 3.18.2 relies on component lengt...

Security readout for executives and security teams

CVE-2014-9730 is a Linux kernel denial-of-service flaw in UDF filesystem handling. A local user with the ability to provide a crafted UDF filesystem image could crash the system. The public record does not show data theft, privilege escalation, or active exploitation. Exposure is most likely on systems running Linux kernel versions before 3.18.2 or vendor kernels without the backported fix, especially where local users can cause UDF filesystem images to be processed. Treat this as a patch-management and availability risk, not an emergency internet-facing compromise. Prioritize vulnerable shared systems and endpoints where untrusted users or removable media are realistic. Mitigation focus: Upgrade to Linux 3.18.2 or a vendor kernel containing the backported fix.; Review SUSE, Red Hat, or distribution advisories for affected kernel package status.; Restrict untrusted local users from mounting or processing UDF images until patched..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.