CVE-2022-25327

Publication date

2022-02-25 11:00:14

Family

Google

State

PUBLISHED

Description

The PAM module for fscrypt doesnt adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above