The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 2.6.28.4 | 2.6.28.4.x |
| linux / linux_kernel | 2.6.28.2 | 2.6.28.2.x |
| linux / linux_kernel | 2.6.28.5 | 2.6.28.5.x |
| linux / linux_kernel | 2.6.28.8 | 2.6.28.8.x |
| linux / linux_kernel | 2.6.28.3 | 2.6.28.3.x |
| linux / linux_kernel | 2.6.28.6 | 2.6.28.6.x |
| linux / linux_kernel | 2.6.28.7 | 2.6.28.7.x |
| linux / linux_kernel | 2.6.28.1 | 2.6.28.1.x |
| linux / linux_kernel | 2.6.28 | 2.6.28.x |