CVE-2024-26763

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-26763", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.172Z", "datePublished": "2024-04-03T17:00:46.308Z", "dateUpdated": "2026-08-05T11:27:05.449Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:27:05.449Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-crypt: don't modify the data when using authenticated encryption\n\nIt was said that authenticated encryption could produce invalid tag when\nthe data that is being encrypted is modified [1]. So, fix this problem by\ncopying the data into the clone bio first and then encrypt them inside the\nclone bio.\n\nThis may reduce performance, but it is needed to prevent the user from\ncorrupting the device by writing data with O_DIRECT and modifying them at\nthe same time.\n\n[1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "baseScore": 7.1, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - Triggering requires issuing local block I/O (an `O_DIRECT` write, or dirty-page writeback) against a dm-crypt target while concurrently mutating the submitting process's own memory pages, which is only possible with local code execution on the machine. No remote peer can modify an in-flight kernel source buffer, so there is no network or adjacent path.\nAC:L - The attacker owns both sides of the race \u2014 one thread submits the `O_DIRECT` write while another rewrites the same buffer in a tight loop \u2014 and can repeat it across many pages until the AEAD reads inconsistent plaintext; public PoCs exist for this exact class (Mikulas Patocka's `blk-auth-modify` testcases cited by the sibling dm-verity/dm-integrity recheck fixes). Nothing depends on memory layout or on state the attacker cannot influence.\nPR:L - Any unprivileged local account with write access to a file or device backed by a dm-crypt target in AEAD mode can do this; `O_DIRECT` needs no capability and the target configuration is the deployment's, not something the attacker must set up. No root, CAP_SYS_ADMIN, or namespace trickery is needed.\nUI:N - The attacker's own two threads perform the entire sequence; no other user must mount, open, or touch anything for the corrupt tag to be committed to disk.\nS:U - The damage is confined to the storage stack managed by the same kernel and the same security authority that already permits the write; no VM, IOMMU, or sandbox boundary is crossed.\nC:N - The operation only produces a tag inconsistent with the ciphertext \u2014 the plaintext involved is the attacker's own, no kernel memory is read out of bounds, and no state is disclosed to the attacker.\nI:H - The write completes successfully yet commits data whose authentication tag is invalid, silently and permanently corrupting the device \u2014 the commit message states the fix is needed \"to prevent the user from corrupting the device.\" This directly defeats the integrity guarantee dm-crypt's authenticated-encryption mode exists to provide, letting an unprivileged user manufacture arbitrary tamper-detection failures (`INTEGRITY AEAD ERROR`, `dm_audit_log_bio`) that are indistinguishable from genuine attacks and can be used to mask or discredit real tampering.\nA:H - Every subsequent read of an affected sector fails permanently with `BLK_STS_PROTECTION`/EILSEQ; the data is unrecoverable, and the attack can be repeated at will to render large regions of a shared encrypted volume unreadable, with metadata read failures capable of forcing a filesystem read-only or into its error policy."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/md/dm-crypt.c"], "versions": [{"version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "43a202bd552976497474ae144942e32cc5f34d7e", "status": "affected", "versionType": "git"}, {"version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "0dccbb93538fe89a86c6de31d4b1c8c560848eaa", "status": "affected", "versionType": "git"}, {"version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90", "status": "affected", "versionType": "git"}, {"version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "1a4371db68a31076afbe56ecce34fbbe6c80c529", "status": "affected", "versionType": "git"}, {"version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "e08c2a8d27e989f0f5b0888792643027d7e691e6", "status": "affected", "versionType": "git"}, {"version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "64ba01a365980755732972523600a961c4266b75", "status": "affected", "versionType": "git"}, {"version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "d9e3763a505e50ba3bd22846f2a8db99429fb857", "status": "affected", "versionType": "git"}, {"version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "50c70240097ce41fe6bce6478b80478281e4d0f7", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/md/dm-crypt.c"], "versions": [{"version": "4.12", "status": "affected"}, {"version": "0", "lessThan": "4.12", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.308", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.270", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.211", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.150", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.80", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.19", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.7", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "4.19.308"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "5.4.270"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "5.10.211"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "5.15.150"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "6.1.80"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "6.6.19"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "6.7.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "6.8"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e"}, {"url": "https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa"}, {"url": "https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90"}, {"url": "https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529"}, {"url": "https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6"}, {"url": "https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75"}, {"url": "https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857"}, {"url": "https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7"}], "title": "dm-crypt: don't modify the data when using authenticated encryption", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:13.305Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26763", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:51:31.262032Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:33:13.692Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:13.305Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26763", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:51:31.262032Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:15.546Z"}}], "cna": {"title": "dm-crypt: don't modify the data when using authenticated encryption", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - Triggering requires issuing local block I/O (an `O_DIRECT` write, or dirty-page writeback) against a dm-crypt target while concurrently mutating the submitting process's own memory pages, which is only possible with local code execution on the machine. No remote peer can modify an in-flight kernel source buffer, so there is no network or adjacent path.\nAC:L - The attacker owns both sides of the race \u2014 one thread submits the `O_DIRECT` write while another rewrites the same buffer in a tight loop \u2014 and can repeat it across many pages until the AEAD reads inconsistent plaintext; public PoCs exist for this exact class (Mikulas Patocka's `blk-auth-modify` testcases cited by the sibling dm-verity/dm-integrity recheck fixes). Nothing depends on memory layout or on state the attacker cannot influence.\nPR:L - Any unprivileged local account with write access to a file or device backed by a dm-crypt target in AEAD mode can do this; `O_DIRECT` needs no capability and the target configuration is the deployment's, not something the attacker must set up. No root, CAP_SYS_ADMIN, or namespace trickery is needed.\nUI:N - The attacker's own two threads perform the entire sequence; no other user must mount, open, or touch anything for the corrupt tag to be committed to disk.\nS:U - The damage is confined to the storage stack managed by the same kernel and the same security authority that already permits the write; no VM, IOMMU, or sandbox boundary is crossed.\nC:N - The operation only produces a tag inconsistent with the ciphertext \u2014 the plaintext involved is the attacker's own, no kernel memory is read out of bounds, and no state is disclosed to the attacker.\nI:H - The write completes successfully yet commits data whose authentication tag is invalid, silently and permanently corrupting the device \u2014 the commit message states the fix is needed \"to prevent the user from corrupting the device.\" This directly defeats the integrity guarantee dm-crypt's authenticated-encryption mode exists to provide, letting an unprivileged user manufacture arbitrary tamper-detection failures (`INTEGRITY AEAD ERROR`, `dm_audit_log_bio`) that are indistinguishable from genuine attacks and can be used to mask or discredit real tampering.\nA:H - Every subsequent read of an affected sector fails permanently with `BLK_STS_PROTECTION`/EILSEQ; the data is unrecoverable, and the attack can be repeated at will to render large regions of a shared encrypted volume unreadable, with metadata read failures capable of forcing a filesystem read-only or into its error policy."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "43a202bd552976497474ae144942e32cc5f34d7e", "versionType": "git"}, {"status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "0dccbb93538fe89a86c6de31d4b1c8c560848eaa", "versionType": "git"}, {"status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90", "versionType": "git"}, {"status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "1a4371db68a31076afbe56ecce34fbbe6c80c529", "versionType": "git"}, {"status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "e08c2a8d27e989f0f5b0888792643027d7e691e6", "versionType": "git"}, {"status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "64ba01a365980755732972523600a961c4266b75", "versionType": "git"}, {"status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "d9e3763a505e50ba3bd22846f2a8db99429fb857", "versionType": "git"}, {"status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "lessThan": "50c70240097ce41fe6bce6478b80478281e4d0f7", "versionType": "git"}], "programFiles": ["drivers/md/dm-crypt.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.12"}, {"status": "unaffected", "version": "0", "lessThan": "4.12", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.308", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.270", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.211", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.150", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.80", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.19", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.7", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/md/dm-crypt.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e"}, {"url": "https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa"}, {"url": "https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90"}, {"url": "https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529"}, {"url": "https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6"}, {"url": "https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75"}, {"url": "https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857"}, {"url": "https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-crypt: don't modify the data when using authenticated encryption\n\nIt was said that authenticated encryption could produce invalid tag when\nthe data that is being encrypted is modified [1]. So, fix this problem by\ncopying the data into the clone bio first and then encrypt them inside the\nclone bio.\n\nThis may reduce performance, but it is needed to prevent the user from\ncorrupting the device by writing data with O_DIRECT and modifying them at\nthe same time.\n\n[1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/"}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.19.308", "versionStartIncluding": "4.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.4.270", "versionStartIncluding": "4.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.211", "versionStartIncluding": "4.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.150", "versionStartIncluding": "4.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.80", "versionStartIncluding": "4.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.19", "versionStartIncluding": "4.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.7.7", "versionStartIncluding": "4.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.8", "versionStartIncluding": "4.12"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:27:05.449Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26763", "state": "PUBLISHED", "dateUpdated": "2026-08-05T11:27:05.449Z", "dateReserved": "2024-02-19T14:20:24.172Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-03T17:00:46.308Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/md/dm-crypt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "43a202bd552976497474ae144942e32cc5f34d7e", "status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "versionType": "git"}, {"lessThan": "0dccbb93538fe89a86c6de31d4b1c8c560848eaa", "status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "versionType": "git"}, {"lessThan": "3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90", "status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "versionType": "git"}, {"lessThan": "1a4371db68a31076afbe56ecce34fbbe6c80c529", "status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "versionType": "git"}, {"lessThan": "e08c2a8d27e989f0f5b0888792643027d7e691e6", "status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "versionType": "git"}, {"lessThan": "64ba01a365980755732972523600a961c4266b75", "status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "versionType": "git"}, {"lessThan": "d9e3763a505e50ba3bd22846f2a8db99429fb857", "status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "versionType": "git"}, {"lessThan": "50c70240097ce41fe6bce6478b80478281e4d0f7", "status": "affected", "version": "ef43aa38063a6b2b3c6618e28ab35794f4f1fe29", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/md/dm-crypt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.12"}, {"lessThan": "4.12", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "4.19.*", "status": "unaffected", "version": "4.19.308", "versionType": "semver"}, {"lessThanOrEqual": "5.4.*", "status": "unaffected", "version": "5.4.270", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.211", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.150", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.80", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.19", "versionType": "semver"}, {"lessThanOrEqual": "6.7.*", "status": "unaffected", "version": "6.7.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B6FB6042-3E0F-4A36-8DED-B3C350612BDC", "versionEndExcluding": "4.19.308", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "5D8044B1-C7E8-44A4-9F03-A4D7BCDB1721", "versionEndExcluding": "5.4.270", "versionStartIncluding": "4.20", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7DDA4DCF-671D-415D-94DF-6E3C77DF0704", "versionEndExcluding": "5.10.211", "versionStartIncluding": "5.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "CB6C60DE-9E0C-46C5-904D-D4F4031F8E95", "versionEndExcluding": "5.15.150", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA7850CE-97C9-4408-A348-6173296BCA2B", "versionEndExcluding": "6.1.80", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0", "versionEndExcluding": "6.6.19", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B", "versionEndExcluding": "6.7.7", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-crypt: don't modify the data when using authenticated encryption\n\nIt was said that authenticated encryption could produce invalid tag when\nthe data that is being encrypted is modified [1]. So, fix this problem by\ncopying the data into the clone bio first and then encrypt them inside the\nclone bio.\n\nThis may reduce performance, but it is needed to prevent the user from\ncorrupting the device by writing data with O_DIRECT and modifying them at\nthe same time.\n\n[1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/"}, {"lang": "es", "value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: dm-crypt: no modifica los datos cuando se utiliza cifrado autenticado Se dijo que el cifrado autenticado podr\u00eda producir etiquetas no v\u00e1lidas cuando se modifican los datos que se est\u00e1n cifrando [1]. Entonces, solucione este problema copiando primero los datos en la biograf\u00eda del clon y luego cifr\u00e1ndolos dentro de la biograf\u00eda del clon. Esto puede reducir el rendimiento, pero es necesario para evitar que el usuario da\u00f1e el dispositivo escribiendo datos con O_DIRECT y modific\u00e1ndolos al mismo tiempo. [1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/"}], "id": "CVE-2024-26763", "lastModified": "2026-08-04T11:17:01.760", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-26763", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-09-10T15:51:31.262032Z", "version": "2.0.3"}}]}, "published": "2024-04-03T17:15:52.520", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: dm-crypt: don't modify the data when using authenticated encryption", "id": "2273196", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273196"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-99", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndm-crypt: don't modify the data when using authenticated encryption\nIt was said that authenticated encryption could produce invalid tag when\nthe data that is being encrypted is modified [1]. So, fix this problem by\ncopying the data into the clone bio first and then encrypt them inside the\nclone bio.\nThis may reduce performance, but it is needed to prevent the user from\ncorrupting the device by writing data with O_DIRECT and modifying them at\nthe same time.\n[1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/"], "name": "CVE-2024-26763", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-04-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-26763\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-26763\nhttps://lore.kernel.org/linux-cve-announce/2024040305-CVE-2024-26763-4627@gregkh/T"], "threat_severity": "Low"}

{}