In the Linux kernel, the following vulnerability has been resolved:
ecryptfs: Fix buffer size for tag 66 packet
The 'TAG 66 Packet Format' description is missing the cipher code and checksum fields that are packed into the message packet. As a result, the buffer allocated for the packet is 3 bytes too small and write_tag_66_packet() will write up to 3 bytes past the end of the buffer.
Fix this by increasing the size of the allocation so the whole packet will always fit in the buffer.
This fixes the below kasan slab-out-of-bounds bug:
BUG: KASAN: slab-out-of-bounds in ecryptfs_generate_key_packet_set+0x7d6/0xde0 Write of size 1 at addr ffff88800afbb2a5 by task touch/181
CPU: 0 PID: 181 Comm: touch Not tainted 6.6.13-gnu #1 4c9534092be820851bb687b82d1f92a426598dc6 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2/GNU Guix 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x4c/0x70 print_report+0xc5/0x610 ? ecryptfs_generate_key_packet_set+0x7d6/0xde0 ? kasan_complete_mode_report_info+0x44/0x210 ? ecryptfs_generate_key_packet_set+0x7d6/0xde0 kasan_report+0xc2/0x110 ? ecryptfs_generate_key_packet_set+0x7d6/0xde0 __asan_store1+0x62/0x80 ecryptfs_generate_key_packet_set+0x7d6/0xde0 ? __pfx_ecryptfs_generate_key_packet_set+0x10/0x10 ? __alloc_pages+0x2e2/0x540 ? __pfx_ovl_open+0x10/0x10 [overlay 30837f11141636a8e1793533a02e6e2e885dad1d] ? dentry_open+0x8f/0xd0 ecryptfs_write_metadata+0x30a/0x550 ? __pfx_ecryptfs_write_metadata+0x10/0x10 ? ecryptfs_get_lower_file+0x6b/0x190 ecryptfs_initialize_file+0x77/0x150 ecryptfs_create+0x1c2/0x2f0 path_openat+0x17cf/0x1ba0 ? __pfx_path_openat+0x10/0x10 do_filp_open+0x15e/0x290 ? __pfx_do_filp_open+0x10/0x10 ? __kasan_check_write+0x18/0x30 ? _raw_spin_lock+0x86/0xf0 ? __pfx__raw_spin_lock+0x10/0x10 ? __kasan_check_write+0x18/0x30 ? alloc_fd+0xf4/0x330 do_sys_openat2+0x122/0x160 ? __pfx_do_sys_openat2+0x10/0x10 __x64_sys_openat+0xef/0x170 ? __pfx___x64_sys_openat+0x10/0x10 do_syscall_64+0x60/0xd0 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 RIP: 0033:0x7f00a703fd67 Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f RSP: 002b:00007ffc088e30b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ffc088e3368 RCX: 00007f00a703fd67 RDX: 0000000000000941 RSI: 00007ffc088e48d7 RDI: 00000000ffffff9c RBP: 00007ffc088e48d7 R08: 0000000000000001 R09: 0000000000000000 R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000941 R13: 0000000000000000 R14: 00007ffc088e48d7 R15: 00007f00a7180040 </TASK>
Allocated by task 181: kasan_save_stack+0x2f/0x60 kasan_set_track+0x29/0x40 kasan_save_alloc_info+0x25/0x40 __kasan_kmalloc+0xc5/0xd0 __kmalloc+0x66/0x160 ecryptfs_generate_key_packet_set+0x6d2/0xde0 ecryptfs_write_metadata+0x30a/0x550 ecryptfs_initialize_file+0x77/0x150 ecryptfs_create+0x1c2/0x2f0 path_openat+0x17cf/0x1ba0 do_filp_open+0x15e/0x290 do_sys_openat2+0x122/0x160 __x64_sys_openat+0xef/0x170 do_syscall_64+0x60/0xd0 entry_SYSCALL_64_after_hwframe+0x6e/0xd8
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.219-208.866Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.349-266.564Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | May 21, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-64kbUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-rtUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kernel-azure-baseUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kb | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-oemUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64k | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub