Description
The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.
References
- 20020102 Vulnerability in encrypted loop device for linux mailing-list
- 3775 vdb-entry
- linux-loop-device-encryption(7769) vdb-entry