CVE-2024-26763 (GCVE-0-2024-26763)
Vulnerability from cvelistv5
Published
2024-04-03 17:00
Modified
2026-08-05 11:27
Severity ?
7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: dm-crypt: don't modify the data when using authenticated encryption It was said that authenticated encryption could produce invalid tag when the data that is being encrypted is modified [1]. So, fix this problem by copying the data into the clone bio first and then encrypt them inside the clone bio. This may reduce performance, but it is needed to prevent the user from corrupting the device by writing data with O_DIRECT and modifying them at the same time. [1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/
References
Impacted products
Vendor Product Version
Linux Linux Version: ef43aa38063a6b2b3c6618e28ab35794f4f1fe29
Version: ef43aa38063a6b2b3c6618e28ab35794f4f1fe29
Version: ef43aa38063a6b2b3c6618e28ab35794f4f1fe29
Version: ef43aa38063a6b2b3c6618e28ab35794f4f1fe29
Version: ef43aa38063a6b2b3c6618e28ab35794f4f1fe29
Version: ef43aa38063a6b2b3c6618e28ab35794f4f1fe29
Version: ef43aa38063a6b2b3c6618e28ab35794f4f1fe29
Version: ef43aa38063a6b2b3c6618e28ab35794f4f1fe29
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:14:13.305Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-26763",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:51:31.262032Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:13.692Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/md/dm-crypt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "43a202bd552976497474ae144942e32cc5f34d7e",
              "status": "affected",
              "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29",
              "versionType": "git"
            },
            {
              "lessThan": "0dccbb93538fe89a86c6de31d4b1c8c560848eaa",
              "status": "affected",
              "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29",
              "versionType": "git"
            },
            {
              "lessThan": "3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90",
              "status": "affected",
              "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29",
              "versionType": "git"
            },
            {
              "lessThan": "1a4371db68a31076afbe56ecce34fbbe6c80c529",
              "status": "affected",
              "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29",
              "versionType": "git"
            },
            {
              "lessThan": "e08c2a8d27e989f0f5b0888792643027d7e691e6",
              "status": "affected",
              "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29",
              "versionType": "git"
            },
            {
              "lessThan": "64ba01a365980755732972523600a961c4266b75",
              "status": "affected",
              "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29",
              "versionType": "git"
            },
            {
              "lessThan": "d9e3763a505e50ba3bd22846f2a8db99429fb857",
              "status": "affected",
              "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29",
              "versionType": "git"
            },
            {
              "lessThan": "50c70240097ce41fe6bce6478b80478281e4d0f7",
              "status": "affected",
              "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/md/dm-crypt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.12"
            },
            {
              "lessThan": "4.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.308",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.211",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.150",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.80",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.8",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.308",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.270",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.211",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.150",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.80",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.19",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.7",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-crypt: don\u0027t modify the data when using authenticated encryption\n\nIt was said that authenticated encryption could produce invalid tag when\nthe data that is being encrypted is modified [1]. So, fix this problem by\ncopying the data into the clone bio first and then encrypt them inside the\nclone bio.\n\nThis may reduce performance, but it is needed to prevent the user from\ncorrupting the device by writing data with O_DIRECT and modifying them at\nthe same time.\n\n[1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Triggering requires issuing local block I/O (an `O_DIRECT` write, or dirty-page writeback) against a dm-crypt target while concurrently mutating the submitting process\u0027s own memory pages, which is only possible with local code execution on the machine. No remote peer can modify an in-flight kernel source buffer, so there is no network or adjacent path.\nAC:L - The attacker owns both sides of the race \u2014 one thread submits the `O_DIRECT` write while another rewrites the same buffer in a tight loop \u2014 and can repeat it across many pages until the AEAD reads inconsistent plaintext; public PoCs exist for this exact class (Mikulas Patocka\u0027s `blk-auth-modify` testcases cited by the sibling dm-verity/dm-integrity recheck fixes). Nothing depends on memory layout or on state the attacker cannot influence.\nPR:L - Any unprivileged local account with write access to a file or device backed by a dm-crypt target in AEAD mode can do this; `O_DIRECT` needs no capability and the target configuration is the deployment\u0027s, not something the attacker must set up. No root, CAP_SYS_ADMIN, or namespace trickery is needed.\nUI:N - The attacker\u0027s own two threads perform the entire sequence; no other user must mount, open, or touch anything for the corrupt tag to be committed to disk.\nS:U - The damage is confined to the storage stack managed by the same kernel and the same security authority that already permits the write; no VM, IOMMU, or sandbox boundary is crossed.\nC:N - The operation only produces a tag inconsistent with the ciphertext \u2014 the plaintext involved is the attacker\u0027s own, no kernel memory is read out of bounds, and no state is disclosed to the attacker.\nI:H - The write completes successfully yet commits data whose authentication tag is invalid, silently and permanently corrupting the device \u2014 the commit message states the fix is needed \"to prevent the user from corrupting the device.\" This directly defeats the integrity guarantee dm-crypt\u0027s authenticated-encryption mode exists to provide, letting an unprivileged user manufacture arbitrary tamper-detection failures (`INTEGRITY AEAD ERROR`, `dm_audit_log_bio`) that are indistinguishable from genuine attacks and can be used to mask or discredit real tampering.\nA:H - Every subsequent read of an affected sector fails permanently with `BLK_STS_PROTECTION`/EILSEQ; the data is unrecoverable, and the attack can be repeated at will to render large regions of a shared encrypted volume unreadable, with metadata read failures capable of forcing a filesystem read-only or into its error policy."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:27:05.449Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e"
        },
        {
          "url": "https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa"
        },
        {
          "url": "https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90"
        },
        {
          "url": "https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529"
        },
        {
          "url": "https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6"
        },
        {
          "url": "https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75"
        },
        {
          "url": "https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857"
        },
        {
          "url": "https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7"
        }
      ],
      "title": "dm-crypt: don\u0027t modify the data when using authenticated encryption",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-26763",
    "datePublished": "2024-04-03T17:00:46.308Z",
    "dateReserved": "2024-02-19T14:20:24.172Z",
    "dateUpdated": "2026-08-05T11:27:05.449Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:14:13.305Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-26763\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T15:51:31.262032Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:15.546Z\"}}], \"cna\": {\"title\": \"dm-crypt: don\u0027t modify the data when using authenticated encryption\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.1, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:L - Triggering requires issuing local block I/O (an `O_DIRECT` write, or dirty-page writeback) against a dm-crypt target while concurrently mutating the submitting process\u0027s own memory pages, which is only possible with local code execution on the machine. No remote peer can modify an in-flight kernel source buffer, so there is no network or adjacent path.\\nAC:L - The attacker owns both sides of the race \\u2014 one thread submits the `O_DIRECT` write while another rewrites the same buffer in a tight loop \\u2014 and can repeat it across many pages until the AEAD reads inconsistent plaintext; public PoCs exist for this exact class (Mikulas Patocka\u0027s `blk-auth-modify` testcases cited by the sibling dm-verity/dm-integrity recheck fixes). Nothing depends on memory layout or on state the attacker cannot influence.\\nPR:L - Any unprivileged local account with write access to a file or device backed by a dm-crypt target in AEAD mode can do this; `O_DIRECT` needs no capability and the target configuration is the deployment\u0027s, not something the attacker must set up. No root, CAP_SYS_ADMIN, or namespace trickery is needed.\\nUI:N - The attacker\u0027s own two threads perform the entire sequence; no other user must mount, open, or touch anything for the corrupt tag to be committed to disk.\\nS:U - The damage is confined to the storage stack managed by the same kernel and the same security authority that already permits the write; no VM, IOMMU, or sandbox boundary is crossed.\\nC:N - The operation only produces a tag inconsistent with the ciphertext \\u2014 the plaintext involved is the attacker\u0027s own, no kernel memory is read out of bounds, and no state is disclosed to the attacker.\\nI:H - The write completes successfully yet commits data whose authentication tag is invalid, silently and permanently corrupting the device \\u2014 the commit message states the fix is needed \\\"to prevent the user from corrupting the device.\\\" This directly defeats the integrity guarantee dm-crypt\u0027s authenticated-encryption mode exists to provide, letting an unprivileged user manufacture arbitrary tamper-detection failures (`INTEGRITY AEAD ERROR`, `dm_audit_log_bio`) that are indistinguishable from genuine attacks and can be used to mask or discredit real tampering.\\nA:H - Every subsequent read of an affected sector fails permanently with `BLK_STS_PROTECTION`/EILSEQ; the data is unrecoverable, and the attack can be repeated at will to render large regions of a shared encrypted volume unreadable, with metadata read failures capable of forcing a filesystem read-only or into its error policy.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"ef43aa38063a6b2b3c6618e28ab35794f4f1fe29\", \"lessThan\": \"43a202bd552976497474ae144942e32cc5f34d7e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ef43aa38063a6b2b3c6618e28ab35794f4f1fe29\", \"lessThan\": \"0dccbb93538fe89a86c6de31d4b1c8c560848eaa\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ef43aa38063a6b2b3c6618e28ab35794f4f1fe29\", \"lessThan\": \"3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ef43aa38063a6b2b3c6618e28ab35794f4f1fe29\", \"lessThan\": \"1a4371db68a31076afbe56ecce34fbbe6c80c529\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ef43aa38063a6b2b3c6618e28ab35794f4f1fe29\", \"lessThan\": \"e08c2a8d27e989f0f5b0888792643027d7e691e6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ef43aa38063a6b2b3c6618e28ab35794f4f1fe29\", \"lessThan\": \"64ba01a365980755732972523600a961c4266b75\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ef43aa38063a6b2b3c6618e28ab35794f4f1fe29\", \"lessThan\": \"d9e3763a505e50ba3bd22846f2a8db99429fb857\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ef43aa38063a6b2b3c6618e28ab35794f4f1fe29\", \"lessThan\": \"50c70240097ce41fe6bce6478b80478281e4d0f7\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/md/dm-crypt.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.12\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.12\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.308\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.270\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.211\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.150\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.80\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.19\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.7\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/md/dm-crypt.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e\"}, {\"url\": \"https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa\"}, {\"url\": \"https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90\"}, {\"url\": \"https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529\"}, {\"url\": \"https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6\"}, {\"url\": \"https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75\"}, {\"url\": \"https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857\"}, {\"url\": \"https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndm-crypt: don\u0027t modify the data when using authenticated encryption\\n\\nIt was said that authenticated encryption could produce invalid tag when\\nthe data that is being encrypted is modified [1]. So, fix this problem by\\ncopying the data into the clone bio first and then encrypt them inside the\\nclone bio.\\n\\nThis may reduce performance, but it is needed to prevent the user from\\ncorrupting the device by writing data with O_DIRECT and modifying them at\\nthe same time.\\n\\n[1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.308\", \"versionStartIncluding\": \"4.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.270\", \"versionStartIncluding\": \"4.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.211\", \"versionStartIncluding\": \"4.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.150\", \"versionStartIncluding\": \"4.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.80\", \"versionStartIncluding\": \"4.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.19\", \"versionStartIncluding\": \"4.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7.7\", \"versionStartIncluding\": \"4.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8\", \"versionStartIncluding\": \"4.12\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T11:27:05.449Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-26763\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T11:27:05.449Z\", \"dateReserved\": \"2024-02-19T14:20:24.172Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-04-03T17:00:46.308Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.