https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:22:34 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:23086 <p><strong>Affected:</strong> AlmaLinux:8: libluksmeta, AlmaLinux:8: libluksmeta-devel, AlmaLinux:8: luksmeta</p> <p>LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux.</p> <p>Security Fix(es):</p> <p>* luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libluksmeta, AlmaLinux:8: libluksmeta-devel, AlmaLinux:8: luksmeta</p> <p>LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux.</p> <p>Security Fix(es):</p> <p>* luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:23086 https://cve.radiocsirt.org/vuln/euvd-2026-362224 EUVD-2026-362224 https://cve.radiocsirt.org/vuln/euvd-2026-362224 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11568 <p>A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user&#39;s encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.</p> <p>A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user&#39;s encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11568 https://cve.radiocsirt.org/vuln/ghsa-pvmm-7c2r-wmp4 <p>A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user&#39;s encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.</p> <p>A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user&#39;s encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-pvmm-7c2r-wmp4 https://cve.radiocsirt.org/vuln/oesa-2025-2688 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: luksmeta, openEuler:22.03-LTS-SP3: luksmeta, openEuler:22.03-LTS-SP4: luksmeta, openEuler:24.03-LTS: luksmeta, openEuler:24.03-LTS-SP1: luksmeta, openEuler:24.03-LTS-SP2: luksmeta</p> <p>LUKSMeta is a simple library for storing metadata in the LUKSv1 header. Some projects need to store additional metadata about a LUKS volume that is accessable before unlocking it. Fortunately, there is a gap in the LUKS header between the end of the slot area and the payload offset, LUKSMeta uses this hole to store additional metadata. Security Fix(es):</p> <p>A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user&amp;apos;s encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.(CVE-2025-11568)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: luksmeta, openEuler:22.03-LTS-SP3: luksmeta, openEuler:22.03-LTS-SP4: luksmeta, openEuler:24.03-LTS: luksmeta, openEuler:24.03-LTS-SP1: luksmeta, openEuler:24.03-LTS-SP2: luksmeta</p> <p>LUKSMeta is a simple library for storing metadata in the LUKSv1 header. Some projects need to store additional metadata about a LUKS volume that is accessable before unlocking it. Fortunately, there is a gap in the LUKS header between the end of the slot area and the payload offset, LUKSMeta uses this hole to store additional metadata. Security Fix(es):</p> <p>A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user&amp;apos;s encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.(CVE-2025-11568)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2688 https://cve.radiocsirt.org/vuln/rhsa-2025:23086 <p>luksmeta: Data corruption when handling LUKS1 partitions with luksmeta</p> <p>luksmeta: Data corruption when handling LUKS1 partitions with luksmeta</p> https://cve.radiocsirt.org/vuln/rhsa-2025:23086 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11568 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: luksmeta, Ubuntu:20.04:LTS: luksmeta, Ubuntu:22.04:LTS: luksmeta, Ubuntu:24.04:LTS: luksmeta, Ubuntu:25.10: luksmeta, Ubuntu:26.04:LTS: luksmeta</p> <p>A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user&#39;s encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: luksmeta, Ubuntu:20.04:LTS: luksmeta, Ubuntu:22.04:LTS: luksmeta, Ubuntu:24.04:LTS: luksmeta, Ubuntu:25.10: luksmeta, Ubuntu:26.04:LTS: luksmeta</p> <p>A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user&#39;s encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11568 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2820 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2820