Description
In the Linux kernel, the following vulnerability has been resolved: dm-crypt: don't modify the data when using authenticated encryption It was said that authenticated encryption could produce invalid tag when the data that is being encrypted is modified [1]. So, fix this problem by copying the data into the clone bio first and then encrypt them inside the clone bio. This may reduce performance, but it is needed to prevent the user from corrupting the device by writing data with O_DIRECT and modifying them at the same time. [1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ef43aa38063a6b2b3c6618e28ab35794f4f1fe29 to < 43a202bd552976497474ae144942e32cc5f34d7eaffectedef43aa38063a6b2b3c6618e28ab35794f4f1fe29 to < 0dccbb93538fe89a86c6de31d4b1c8c560848eaaaffectedef43aa38063a6b2b3c6618e28ab35794f4f1fe29 to < 3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90affectedef43aa38063a6b2b3c6618e28ab35794f4f1fe29 to < 1a4371db68a31076afbe56ecce34fbbe6c80c529affectedef43aa38063a6b2b3c6618e28ab35794f4f1fe29 to < e08c2a8d27e989f0f5b0888792643027d7e691e6affectedef43aa38063a6b2b3c6618e28ab35794f4f1fe29 to < 64ba01a365980755732972523600a961c4266b75affectedef43aa38063a6b2b3c6618e28ab35794f4f1fe29 to < d9e3763a505e50ba3bd22846f2a8db99429fb857affectedef43aa38063a6b2b3c6618e28ab35794f4f1fe29 to < 50c70240097ce41fe6bce6478b80478281e4d0f7affected
Linux Linux
Default version status: affected
4.12affected0 to < 4.12unaffected4.19.308 to ≤ 4.19.*unaffected5.4.270 to ≤ 5.4.*unaffected5.10.211 to ≤ 5.10.*unaffected5.15.150 to ≤ 5.15.*unaffected6.1.80 to ≤ 6.1.*unaffected6.6.19 to ≤ 6.6.*unaffected6.7.7 to ≤ 6.7.*unaffected6.8 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e ↗
- https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa ↗
- https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90 ↗
- https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529 ↗
- https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6 ↗
- https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75 ↗
- https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857 ↗
- https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7 ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html ↗