CVE-2009-2406

CVE-2009-2406 describes a stack-based buffer overflow in the eCryptfs subsystem of the Linux kernel, affecting versions prior to 2.6.30.4. This vulnerability, located in the parse_tag_11_packet function, allows local users to trigger a denial of service or potentially gain privileges through a crafted eCryptfs file. With a CVSS score of 6.9, it is considered high severity due to its potential for complete confidentiality, integrity, and availability impact, though it requires medium attack complexity. There is no known exploit code available in common databases like Metasploit or ExploitDB, and it has received minimal community discussion or media coverage, indicating no active exploitation or widespread attention.