A vulnerability in the Linux kernel eCryptfs module allows authenticated local users to trigger memory corruption and potential information disclosure or system crashes.

The flaw exists in the ecryptfs_parse_packet_set function, which incorrectly calculates the remaining buffer size when parsing file headers. An attacker with local access and low privileges can exploit this to overstate available buffer space, leading to out-of-bounds memory access.

The vulnerability carries a CVSS score of 7.1, reflecting a significant risk to local system integrity and availability. Successful exploitation allows a local user to cause system instability or leak sensitive information residing in kernel memory, which could lead to unauthorized data access or disruption of critical business services running on the affected host.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later depending on the distribution branch in use.

Proactive Monitoring: Review system logs for kernel oops or segmentation faults that may indicate attempts to trigger memory corruption vulnerabilities in the eCryptfs filesystem.

Compensating Controls: Restrict access to the system to only authorized personnel and limit the ability of untrusted users to mount or interact with eCryptfs encrypted filesystems.

Public Exploit Available: No (exploit_available: false)

While the requirement for local access reduces the immediate urgency compared to remote vulnerabilities, the severity of a kernel-level flaw is high. Administrators should prioritize patching the Linux kernel during the next maintenance window to eliminate the risk of local privilege escalation or system crashes associated with this memory handling error.