Summary
LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux.
Security Fix(es):
* luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | libluksmeta | 9-4.el8_10.1 |
| AlmaLinux · 8 | libluksmeta-devel | 9-4.el8_10.1 |
| AlmaLinux · 8 | luksmeta | 9-4.el8_10.1 |
Vulnerabilities 1
-
Medium 4.4
Luksmeta: data corruption when handling luks1 partitions with luksmeta
A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The uti…