VULNERABILITY INTELLIGENCE

CVE-2002-0570

CVSS score2.1 LOW
EPSS probability0.40%
CISA KEVNot currently listed
Published2002-07-03
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N

Description

The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.

Primary references