CVE-2009-2406: Linux Kernel

Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size.

Affected products

• Linux Kernel: version 2.6.24.7 only; version 2.6.25.15 only
• Linux Linux Kernel: up to and including 2.6.30.3; version 2.2.6 only; version 2.6 only; version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; …

Published 2009-07-31. Last modified 2026-06-16.