CVE-2014-9922

The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux	17.10 artful	Not affected
	17.04 zesty	Not affected
	16.10 yakkety	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not affected
	12.04 LTS precise	Ignored end of life
linux-armadaxp	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-aws	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not affected
	12.04 LTS precise	Not in release
linux-azure	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not affected
linux-euclid	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-flo	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Ignored end of life
	16.04 LTS xenial	Ignored abandoned
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-gcp	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-gke	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-goldfish	17.10 artful	Not in release
	17.04 zesty	Ignored end of life
	16.10 yakkety	Ignored end of life
	16.04 LTS xenial	Ignored abandoned
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-grouper	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-hwe	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-hwe-edge	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-kvm	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-linaro-omap	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-linaro-shared	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-linaro-vexpress	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-quantal	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-raring	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-saucy	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-trusty	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-utopic	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-lts-vivid	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-lts-wily	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-lts-xenial	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not affected
	12.04 LTS precise	Not in release
linux-maguro	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-mako	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Ignored end of life
	16.04 LTS xenial	Ignored abandoned
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-manta	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-oem	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-qcm-msm	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-raspi2	17.10 artful	Not affected
	17.04 zesty	Not affected
	16.10 yakkety	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-snapdragon	17.10 artful	Not affected
	17.04 zesty	Not affected
	16.10 yakkety	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-ti-omap4	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life

Notes

jdstrand

android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support

tyhicks

The fix has already been backported to precise and trusty kernels

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
linux	Introduced by 237fead, fixed by 69c433e

Severity score breakdown

Parameter	Value
Base score	7.8 · High
Attack vector	Local
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cvss 3 Severity Score