CVE-2014-9922

The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c.

• CWE-264

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=69c433ed2ecd2d3264efd7afec4439524b319121Issue Tracking, Patch, Third Party Advisory
• http://source.android.com/security/bulletin/2017-04-01.htmlPatch, Third Party Advisory
• http://www.securityfocus.com/bid/97354Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038201
• https://github.com/torvalds/linux/commit/69c433ed2ecd2d3264efd7afec4439524b319121Issue Tracking, Patch, Third Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=69c433ed2ecd2d3264efd7afec4439524b319121Issue Tracking, Patch, Third Party Advisory
• http://source.android.com/security/bulletin/2017-04-01.htmlPatch, Third Party Advisory
• http://www.securityfocus.com/bid/97354Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038201
• https://github.com/torvalds/linux/commit/69c433ed2ecd2d3264efd7afec4439524b319121Issue Tracking, Patch, Third Party Advisory

Published

Apr 4, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9916Multiple cross-site scripting (XSS) vulnerabilities in Bilbo…6.1
• CVE-2014-9917An issue was discovered in Bilboplanet 2.0. There is a store…
• CVE-2014-9918An issue was discovered in Bilboplanet 2.0. Stored XSS exist…
• CVE-2014-9919An issue was discovered in Bilboplanet 2.0. Stored XSS exist…
• CVE-2014-9920Unauthorized execution of binary vulnerability in McAfee (no…
• CVE-2014-9921Information disclosure vulnerability in McAfee (now Intel Se…
• CVE-2014-9923In NAS in all Android releases from CAF using the Linux kern…
• CVE-2014-9924In 1x in all Android releases from CAF using the Linux kerne…
• CVE-2014-9925In HDR in all Android releases from CAF using the Linux kern…
• CVE-2014-9926In GNSS in all Android releases from CAF using the Linux ker…
• CVE-2014-9927In UIM in all Android releases from CAF using the Linux kern…
• CVE-2014-9928In GERAN in all Android releases from CAF using the Linux ke…