CVE-2009-2407

CVE-2009-2407 describes a heap-based buffer overflow in the eCryptfs subsystem of the Linux kernel, affecting versions prior to 2.6.30.4. This vulnerability allows a local attacker to trigger a denial of service (system crash) or potentially escalate privileges by crafting an eCryptfs file with a large encrypted key size in a Tag 3 packet. With a CVSS score of 6.9, it represents a moderate to high severity risk due to its local attack vector and potential for complete confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.