12 matches found
CVE-2026-89607
A flaw was found in ecryptfs in the Linux kernel. The parsetag3packet function does not properly validate the size of the encrypted key, allowing an oversized key to be processed. This improper validation leads to out-of-bounds writes, corrupting critical data structures within the ecryptfsauthto...
Linux Distros Unpatched Vulnerability : CVE-2026-89607
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against...
CVE-2026-89607
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against ECRYPTFSMAXKEYBYTES 64. When encryptedkeysize 64,...
UBUNTU-CVE-2026-89607
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against ECRYPTFSMAXKEYBYTES 64. When encryptedkeysize 64,...
CVE-2026-89607 ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against ECRYPTFSMAXKEYBYTES 64. When encryptedkeysize 64,...
CVE-2026-89607
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against ECRYPTFSMAXKEYBYTES 64. When encryptedkeysize 64,...
CVE-2026-89607
CVE-2026-89607 affects the Linux kernel's ecryptfs module. The function parse_tag_3_packet() fails to bound encrypted_key_size against ECRYPTFS_MAX_KEY_BYTES (64) in the passphrase decryption path. When the value exceeds 64, two out-of-bounds writes corrupt the ecryptfs_auth_tok and ecryptfs_cryp...
EUVD-2026-76519
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against ECRYPTFSMAXKEYBYTES 64. When encryptedkeysize 64,...
CVE-2026-89607 ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against ECRYPTFSMAXKEYBYTES 64. When encryptedkeysize 64,...
CVE-2009-2407
Heap-based buffer overflow in the parsetag3packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a...
Linux eCryptfs工具parse_tag_3_packet()函数堆溢出漏洞
BUGTRAQ ID: 35850 eCryptfs是Linux平台下的企业级加密文件系统。 eCryptfs的密钥管理代码中的parsetag3packet函数没有检查tag 3报文所包含的加密密钥大小是否大于ECRYPTFSMAXENCRYPTEDKEYBYTES就将其拷贝到了newauthtok结构中，这可能触发堆溢出漏洞。 fs/ecryptfs/keystore.c -- static int parsetag3packetstruct ecryptfscryptstat cryptstat, unsigned char data, struct listhead...
