In the Linux kernel, the following vulnerability has been resolved:
dm-crypt: don't modify the data when using authenticated encryption
It was said that authenticated encryption could produce invalid tag when the data that is being encrypted is modified [1]. So, fix this problem by copying the data into the clone bio first and then encrypt them inside the clone bio.
This may reduce performance, but it is needed to prevent the user from corrupting the device by writing data with O_DIRECT and modifying them at the same time.
[1] https://lore.kernel.org/all/[email protected]/T/
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.152-100.162Upgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-4.14.343-259.562Upgrade bpftool | Aug 19, 2024 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python3-perfUpgrade kernel-livepatch-6.1.82-99.168Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-static | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade python3-perfUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jul 17, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-azureUpgrade dtb-freescaleUpgrade kernel-azure-baseUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-syms-azure | May 6, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-azureUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-kvmUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-gkeUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-5.4.0-1125-oracle | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub