CVE-2016-6224

Severity: low (CVSS 3.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-07-22 · updated 2026-06-17
Weakness: CWE-20

Description

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8946.

Affected products

Canonical Ubuntu Linux: 14.04, 15.10
Ecryptfs-Utils: through 110

References

http://www.openwall.com/lists/oss-security/2016/07/13/2
http://www.openwall.com/lists/oss-security/2016/07/14/3
http://www.ubuntu.com/usn/USN-3032-1
https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/882
https://bugs.launchpad.net/ecryptfs/+bug/1597154
https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5WWCVHDLRLZTYMXEIONYFHLYAXXLJW3/
http://www.openwall.com/lists/oss-security/2016/07/13/2
http://www.openwall.com/lists/oss-security/2016/07/14/3
http://www.ubuntu.com/usn/USN-3032-1
https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/882
https://bugs.launchpad.net/ecryptfs/+bug/1597154

Get alerted when CVE-2016-6224 or the next vulnerability affects your stack