The Linux kernel's ecryptfs_parse_packet_set() function previously received a pointer into the file header but calculated the remaining packet buffer size as PAGE_SIZE - 8, which is inaccurate for version 1 headers where the packet set starts later. This miscalculation could lead to overstating the available buffer size. The vulnerability was addressed by modifying the code to pass the actual packet set buffer length from the caller and to compute per-packet limits based on the remaining bytes in that buffer. Additionally, the remaining length is recomputed after processing a tag 3 packet before parsing a subsequent tag 11 packet.

The vulnerability could cause incorrect buffer size calculations during packet parsing in ecryptfs, potentially leading to buffer overflows or memory corruption. However, no specific exploitation details or known active exploits are reported. The impact is limited to the ecryptfs component of the Linux kernel.

A fix has been implemented in the Linux kernel to correctly pass and use the actual packet set buffer length in ecryptfs_parse_packet_set(). Users should apply the official Linux kernel updates that include this patch to remediate the vulnerability.