CVE-2014-9728

CVE-2014-9728 describes a denial-of-service vulnerability in the UDF filesystem implementation of the Linux kernel prior to version 3.18.2. This flaw, stemming from a lack of length validation, allows a local attacker to trigger a buffer over-read and system crash using a specially crafted filesystem image. With a CVSS score of 4.9, it is considered a medium-severity vulnerability, requiring local access with low attack complexity to achieve a complete system availability impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.