PT-2025-42393 · Luksmeta+6 · Luksmeta+6

Published 2025-10-14 · Updated 2026-05-19 · CVE-2025-11568

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions luksmeta (affected versions not specified)

Description A data corruption issue exists in the luksmeta utility when operating with the LUKS1 disk encryption format. An attacker possessing appropriate permissions can trigger this flaw by writing a substantial amount of metadata to an encrypted device. The utility does not properly validate available space, resulting in metadata overwriting and corrupting user data, leading to permanent data loss. Devices utilizing LUKS formats other than LUKS1 are not susceptible to this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1284

Related Identifiers

ALSA-2025:23086

ALSA-2026:18421

ALSA-2026:18824

ALT-PU-2025-13907

ALT-PU-2025-14080

AZL-72866

CVE-2025-11568

OESA-2025-2688

RHSA-2025:23086

RHSA-2026:18421

RHSA-2026:18824

Affected Products

Alt Linux

Almalinux

Centos

Debian

Red Hat

Rocky Linux

Luksmeta

References · 30

• https://access.redhat.com/errata/RHSA-2026:18824 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-18824.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11568 · Security Note
• https://errata.rockylinux.org/RLSA-2025:23086 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-23086.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:18421 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-11568 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-11568 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-18421.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-11568 · Security Note
• https://access.redhat.com/errata/RHSA-2026:18421 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:23086 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-11568 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2688 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2025-23086.html · Vendor Advisory