CVE-2025-11568: Luksmeta: data corruption when handling luks1 partitions with luksmeta

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-15 · updated 2026-10-18
Weakness: CWE-1284

Description

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user's encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.

Affected products

Latchset luksmeta: before 10 — fixed in 10
Red Hat OpenShift Container Platform 4.18: all versions
Red Hat Enterprise Linux 10: all versions — fixed in 0:10-1.el10
Red Hat Enterprise Linux 7: all versions
Red Hat Enterprise Linux 8: all versions — fixed in 0:9-4.el8_10.1
Red Hat Enterprise Linux 9: all versions — fixed in 0:10-1.el9

How to fix

Upgrade to a fixed version: Latchset luksmeta 10; Red Hat Enterprise Linux 10 0:10-1.el10; Red Hat Enterprise Linux 8 0:9-4.el8_10.1; Red Hat Enterprise Linux 9 0:10-1.el9. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-11568 or the next vulnerability affects your stack