When parsing an ecryptfs Tag 3 packet, the kernel assigns an oversized encrypted_key_size (>64) to an internal buffer without validating the bound. With this field ignored, allowing crypto_skcipher_decrypt() to write more bytes than the buffer can hold and memcpy() to overflow into surrounding structures. This memory corruption can lead to arbitrary code execution, denial of service, or privilege escalation.

All Linux kernel releases that implement ecryptfs and have not yet integrated the patch. The flaw is tied to AES‑192 usage, so systems configured to use this cipher are at risk. No specific version range is listed; any kernel containing the vulnerable parse_tag_3_packet implementation is potentially affected.

The EPSS score is less than 1% and the vulnerability is not listed in CISA KEV. Although the flaw involves a kernel heap buffer overflow, the CVSS score of 6.3 indicates moderate severity. An attacker with the ability to supply a malicious ecryptfs Tag 3 packet, or otherwise trigger the vulnerable code path, could drive the kernel into executing arbitrary code or causing a denial of service. A public exploit has not yet been disclosed, so the risk depends on the attacker’s ability to influence file operations on affected systems. Applying the corrective patch is strongly recommended.