vulnti.work

In the Linux kernel, the following vulnerability has been resolved: dm-crypt: don't modify the data when using authenticated encryption It was said that authenticated encryption could produce inval…

High CVSS 7.1
CVECVE-2024-26763
First seen2026-08-04 16:15 UTC
Disclosed2024-04-03 17:15 UTC
Last updated2026-08-04 16:15 UTC
Channel statusauto

Summary

In the Linux kernel, the following vulnerability has been resolved: dm-crypt: don't modify the data when using authenticated encryption It was said that authenticated encryption could produce invalid tag when the data that is being encrypted is modified [1]. So, fix this problem by copying the data into the clone bio first and then encrypt them inside the clone bio. This may reduce performance, but it is needed to prevent the user from corrupting the device by writing data with O_DIRECT and …

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • :
  • :

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD