CVE-2022-25327

CVE-2022-25327 affects the PAM module for fscrypt, where inadequate validation of fscrypt metadata files lets a local user craft malicious metadata to cause a denial of service, preventing other users from logging in. The documented remediation is to upgrade to version 0.3.3 or above. The connect...

CVE-2022-25326

CVE-2022-25326 relates to the fscrypt project up to version 0.3.2, where during filesystem setup a world-writable directory is created by default. This behavior allows unprivileged local users to exhaust filesystem space. The public records consistently recommend upgrading to fscrypt 0.3.3 or new...