CyberRota Analysis
AI-GeneratedThe vulnerability affects the eCryptfs implementation in the Linux kernel, specifically in the handling of packet buffer sizes during parsing. An attacker could exploit this flaw to manipulate packet data, potentially leading to buffer overflows or data corruption. Organizations using Linux systems with eCryptfs should prioritize this issue to mitigate potential security risks associated with data integrity and confidentiality.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfs_parse_packet_set() receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGE_SIZE - 8. For version 1 headers the packet set starts later in the header, so this can overstate the available buffer. Pass the actual packet set buffer length from the caller and calculate per-packet limits from the remaining bytes in that buffer. Recompute the remaining length after consuming a tag 3 packet before parsing the following tag 11 packet.