eCryptfs_parse_packet_set() incorrectly calculates the remaining packet buffer size by using a constant PAGE_SIZE - 8 instead of the actual length of the packet set. This overestimation can cause the function to read beyond the intended data boundaries, leading to memory corruption within the kernel. Based on the description, it is inferred that this overflow may corrupt kernel memory, producing a crash. The impact therefore spans from denial of service to integrity compromise at the kernel level.

The vulnerability affects all Linux kernel builds that include the eCryptfs subsystem without the upstream commit that applied the fix. kernel prior to the patch that modifies ecryptfs_parse_packet_set() remains vulnerable. Administrators should compare their kernel release against the upstream git repository to verify protection.

Based on the description, it is inferred that an attacker could craft a malicious eCryptfs packet set and trigger the overflow during file parsing when the kernel mounts or accesses an eCryptfs encrypted file. The CVSS base score of 5.3 indicates moderate severity, the EPSS score of less than 1% suggests a very low exploitation probability, and the vulnerability is not currently listed in the CISA KEV catalog. The likely attack vector is local, requiring the attacker to cause the target system to process a crafted eCryptfs file, which could be delivered via a writableCryptfs data.