Description
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs_parse_tag_70_packet() subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixed fields can underflow that size calculation. Reject tag 70 packets before the subtraction unless the body contains the signature, cipher code, and at least one byte of encrypted filename data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9c79f34f7ee71cd28272332b424ca64b2be006ab to < df5f375a6151ef71f636da044bcef90c26697255affected9c79f34f7ee71cd28272332b424ca64b2be006ab to < 5668121974eb7f7aa82793a9d0d13abadb8904dcaffected9c79f34f7ee71cd28272332b424ca64b2be006ab to < 2e5afed9503dd1d85004c09503adc2cb584c0188affected9c79f34f7ee71cd28272332b424ca64b2be006ab to < 414a0f04feb06f03523edf7e2a8be1d7f1a9b160affected9c79f34f7ee71cd28272332b424ca64b2be006ab to < 9d88391bbed76eb091cddd50b0af87b1c6f22589affected9c79f34f7ee71cd28272332b424ca64b2be006ab to < b31da1ecf13929a8d7f8d2727843d2fe35396b75affected9c79f34f7ee71cd28272332b424ca64b2be006ab to < d2869768eab5648e6edc05f47e0716e5328e6681affected9c79f34f7ee71cd28272332b424ca64b2be006ab to < e97bbe1b2bd82ec2ae37ad2e4965b4d3e78bbf7faffected
Linux Linux
Default version status: affected
2.6.29affected0 to < 2.6.29unaffected5.10.270 to ≤ 5.10.*unaffected5.15.221 to ≤ 5.15.*unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.109 to ≤ 6.12.*unaffected6.18.50 to ≤ 6.18.*unaffected7.2.4 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/df5f375a6151ef71f636da044bcef90c26697255 ↗
- https://git.kernel.org/stable/c/5668121974eb7f7aa82793a9d0d13abadb8904dc ↗
- https://git.kernel.org/stable/c/2e5afed9503dd1d85004c09503adc2cb584c0188 ↗
- https://git.kernel.org/stable/c/414a0f04feb06f03523edf7e2a8be1d7f1a9b160 ↗
- https://git.kernel.org/stable/c/9d88391bbed76eb091cddd50b0af87b1c6f22589 ↗
- https://git.kernel.org/stable/c/b31da1ecf13929a8d7f8d2727843d2fe35396b75 ↗
- https://git.kernel.org/stable/c/d2869768eab5648e6edc05f47e0716e5328e6681 ↗
- https://git.kernel.org/stable/c/e97bbe1b2bd82ec2ae37ad2e4965b4d3e78bbf7f ↗