Medium severity · published Oct 15, 2025
CVE-2025-11568
Luksmeta: data corruption when handling luks1 partitions with luksmeta
4.4
CVSS
0.1%
EPSS
No
On KEV
Description
A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user's encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat Enterprise Linux 10 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 7 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 9 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift Container Platform 4 · Red Hat
All versions, or not specified · source: vendor
LU
luksmeta · Latchset
before 10 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-11568
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-11568
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:23086
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:18421
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:18824
access.redhat.com
https://access.redhat.com/security/cve/CVE-2025-11568
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2404244
github.com
https://github.com/latchset/luksmeta/pull/16
