CVE-2014-9922: The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large fi...

Security readout for executives and security teams

This is a local Linux kernel privilege escalation involving eCryptfs with a large stacked filesystem that includes overlayfs. A person who already has local access could potentially gain higher privileges. The bundle does not provide CVSS scoring or evidence of active exploitation. Most relevant exposure is legacy Linux kernel deployments earlier than 3.18 using eCryptfs with overlayfs-style stacked filesystems. The source bundle does not enumerate specific distributions, devices, or package versions. Treat as important for legacy or multi-user Linux environments because successful exploitation can raise privileges. It is lower urgency for systems without local users, without affected filesystem stacking, or already running fixed vendor kernels. Mitigation focus: Check vendor kernel or Android security guidance for fixed builds.; Prioritize upgrading systems running Linux kernels earlier than 3.18 where supported.; Review whether eCryptfs and overlayfs are enabled or operationally required..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.