CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's dm-pcache component, where improper handling of the persisted tail-position offset can lead to out-of-bounds memory reads. This flaw allows a user with CAP_SYS_ADMIN privileges to manipulate segment offsets, potentially leading to unauthorized data access or system instability. System administrators and security teams managing Linux environments should prioritize this issue to mitigate potential exploitation risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cache_pos_decode() takes the persisted key_tail and dirty_tail seg_off from the cache device and addresses within the segment with it. A seg_off at or past the segment data_size, controllable by whoever supplies the device (CAP_SYS_ADMIN), reads past the segment data. Reject a decoded seg_off that is not below the segment data_size.