In the Linux kernel, the following vulnerability has been resolved:
dm-crypt: don't modify the data when using authenticated encryption
It was said that authenticated encryption could produce invalid tag when the data that is being encrypted is modified [1]. So, fix this problem by copying the data into the clone bio first and then encrypt them inside the clone bio.
This may reduce performance, but it is needed to prevent the user from corrupting the device by writing data with O_DIRECT and modifying them at the same time.
[1] https://lore.kernel.org/all/[email protected]/T/
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-livepatch-5.10.213-201.855Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools | Aug 19, 2024 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-libbpf | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade python3-perf | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-azure-baseUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-armUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-devel | May 6, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub