ecryptfs: reject too-small tag 70 packets (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.14 % · percentile 3 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs_parse_tag_70_packet() subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixed fields can underflow that size calculation. Reject tag 70 packets before the subtraction unless the body contains the signature, cipher code, and at least one byte of encrypted filename data.
References
- https://git.kernel.org/stable/c/df5f375a6151ef71f636da044bcef90c26697255
- https://git.kernel.org/stable/c/5668121974eb7f7aa82793a9d0d13abadb8904dc
- https://git.kernel.org/stable/c/2e5afed9503dd1d85004c09503adc2cb584c0188
- https://git.kernel.org/stable/c/414a0f04feb06f03523edf7e2a8be1d7f1a9b160
- https://git.kernel.org/stable/c/9d88391bbed76eb091cddd50b0af87b1c6f22589
- https://git.kernel.org/stable/c/b31da1ecf13929a8d7f8d2727843d2fe35396b75
- https://git.kernel.org/stable/c/d2869768eab5648e6edc05f47e0716e5328e6681
- https://git.kernel.org/stable/c/e97bbe1b2bd82ec2ae37ad2e4965b4d3e78bbf7f
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
European references
- ENISA EUVD · EUVD-2026-76518
- GCVE · GCVE-0-2026-89606
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 9c79f34f7ee71cd28272332b424ca64b2be006ab < df5f375a6151ef71f636da044bcef90c26697255 ; affected 9c79f34f7ee71cd28272332b424ca64b2be006ab < 5668121974eb7f7aa82793a9d0d13abadb8904dc ; affected 9c79f34f7ee71cd28272332b424ca64b2be006ab < 2e5afed9503dd1d85004c09503adc2cb584c0188 ; affected 9c79f34f7ee71cd28272332b424ca64b2be006ab < 414a0f04feb06f03523edf7e2a8be1d7f1a9b160 ; affected 9c79f34f7ee71cd28272332b424ca64b2be006ab < 9d88391bbed76eb091cddd50b0af87b1c6f22589 ; affected 9c79f34f7ee71cd28272332b424ca64b2be006ab < b31da1ecf13929a8d7f8d2727843d2fe35396b75 |
| Linux · Linux | affected 2.6.29 ; unaffected 0 < 2.6.29 ; unaffected 5.10.270 ≤ 5.10.* ; unaffected 5.15.221 ≤ 5.15.* ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |