CVE-2016-1572

CVE-2016-1572 concerns a flaw in mount.ecryptfs_private.c (ecryptfs-utils) where mount destination filesystem types are not validated, enabling a local user to gain privileges by mounting over a nonstandard filesystem (example: /proc/$pid). The vulnerability has been discussed in multiple advisor...

CVE-2015-8946

Summary : CVE-2015-8946 affects the ecryptfs-utils package (eCryptfs) and its helper, specifically the swap setup in ecryptfs-setup-swap. The issue occurs when using GPT partitioning (and in some cases with certain systemd versions), where encrypted swap is not properly configured, potentially al...

CVE-2016-6224

The CVE-2016-6224 issue affects the ecryptfs-utils package (ecryptfs-setup-swap) and stems from an incomplete fix for CVE-2015-8946. Affects systems using GPT with NVMe or MMC drives; boot may activate an unencrypted swap, leading to potential exposure of sensitive data. Multiple distributions (F...