CVE-2014-9731: The UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is available...

Security readout for executives and security teams

This is a Linux kernel information leak in UDF filesystem handling. A local user with a crafted filesystem image could make the kernel expose sensitive information when reading a symbolic link. The bundle does not provide a CVSS score or evidence of active exploitation. Exposure is most likely on systems running vulnerable Linux kernels that allow local users or services to process untrusted UDF filesystem images. The provided affected-product metadata is incomplete, so distribution-specific exposure should be verified against vendor advisories. Handle through normal kernel patch governance unless untrusted users can mount media or image files on shared systems. Prioritize multi-user hosts and environments processing external disk images. Mitigation focus: Update affected Linux kernels to 3.18.2 or a vendor-supported fixed kernel.; Apply relevant SUSE, openSUSE, Android, or distribution kernel advisories where applicable.; Limit local users' ability to mount or process untrusted UDF filesystem images..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.