CVE-2014-9731

CVE-2014-9731 describes an information disclosure vulnerability in the UDF filesystem implementation of the Linux kernel prior to version 3.18.2. This flaw arises from insufficient space allocation for symlink targets, allowing local users to extract sensitive information via a specially crafted UDF filesystem image. With a CVSS score of 2.1, it is considered low severity, requiring local access and low attack complexity to achieve partial confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low likelihood of widespread exploitation.