In the Linux kernel, the following vulnerability has been resolved:
dm-crypt: don't modify the data when using authenticated encryption
It was said that authenticated encryption could produce invalid tag when the data that is being encrypted is modified [1]. So, fix this problem by copying the data into the clone bio first and then encrypt them inside the clone bio.
This may reduce performance, but it is needed to prevent the user from corrupting the device by writing data with O_DIRECT and modifying them at the same time.
[1] https://lore.kernel.org/all/[email protected]/T/
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.213-201.855Upgrade perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Aug 19, 2024 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.82-99.168Upgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade kernel-azure-baseUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade dtb-lgUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade dtb-armUpgrade dtb-sprdUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kb | May 6, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-intelUpgrade linux-image-raspi2Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1046-gkeop | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub