Summary
LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux.
Security Fix(es):
* luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | libluksmeta | 10-1.el10 |
| AlmaLinux · 10 | libluksmeta-devel | 10-1.el10 |
| AlmaLinux · 10 | luksmeta | 10-1.el10 |
Vulnerabilities 1
-
Medium 4.4
Luksmeta: data corruption when handling luks1 partitions with luksmeta
A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The uti…