In the Linux kernel, the following vulnerability has been resolved:
dm-crypt: don't modify the data when using authenticated encryption
It was said that authenticated encryption could produce invalid tag when the data that is being encrypted is modified [1]. So, fix this problem by copying the data into the clone bio first and then encrypt them inside the clone bio.
This may reduce performance, but it is needed to prevent the user from corrupting the device by writing data with O_DIRECT and modifying them at the same time.
[1] https://lore.kernel.org/all/[email protected]/T/
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.152-100.162Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools | Aug 19, 2024 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-headers | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-defaultUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade kernel-source-azureUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-azure-extra | May 6, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-virtualUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-kvmUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04 | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub