eCryptfs Sees Fixes For Potential Malicious Intent, Some Dating Back To Its 2006 Debut

The eCryptfs stacked cryptographic filesystem implementation for the Linux kernel to transparently encrypt files saw a number of bug fixes for the Linux 7.3 kernel. A number of these bug fixes deal with potential maliciously-crafted data and vulnerable going back to the 2006 introduction of eCryptfs as this option known for its use on Ubuntu home directory encryption and Chrome OS.

The eCryptfs code is now hardened and fixed against maliciously crafted metadata in the lower encrypted file. There is also hardening and fixes for malicious kernel to/from user-space miscdev communication. There are also locking fixes, a fix for displaying encrypted filename related mount options, avoiding unnecessary memory allocations, and other improvements.

Some of these security fixes date back to commit 237fead61998, which is when eCryptfs was being introduced to the mainline kernel all the way back in 2006. At least some of these bugs appear to have been uncovered using AI tooling.

More details on these eCryptfs fixes for Linux 7.3 can be found via this pull request.