In the Linux kernel, the following vulnerability has been resolved:
ecryptfs: reject too-small tag 70 packets
ecryptfs_parse_tag_70_packet() subtracts fixed metadata fields from the
parsed packet body size to derive the encrypted filename size. A
malformed packet with a body smaller than those fixed fields can underflow
that size calculation.
Reject tag 70 packets before the subtraction unless the body contains the
signature, cipher code, and at least one byte of encrypted filename data.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v3.1
References 8
https://git.kernel.org/stable/c/9d88391bbed76eb091cddd50b0af87b1c6f22589
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b31da1ecf13929a8d7f8d2727843d2fe35396b75
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d2869768eab5648e6edc05f47e0716e5328e6681
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e97bbe1b2bd82ec2ae37ad2e4965b4d3e78bbf7f
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2e5afed9503dd1d85004c09503adc2cb584c0188
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/414a0f04feb06f03523edf7e2a8be1d7f1a9b160
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5668121974eb7f7aa82793a9d0d13abadb8904dc
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/df5f375a6151ef71f636da044bcef90c26697255
416baaa9-dc9f-4396-8d5f-8c081fb06d67