Vulnerability in Latchset Luksmeta
CVE-2025-11568
A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user's encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.001 (0.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 1st percentile — 0.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: +0.000
Affected products
- Latchset Luksmeta — versions 0
- Red Hat Enterprise Linux 10 — versions 0:10-1.el10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8 — versions 0:9-4.el8_10.1
- Red Hat Enterprise Linux 9 — versions 0:10-1.el9
- Red Hat In-Vehicle Operating System 1
- Red Hat Openshift Container Platform 4
Weakness classification (CWE)
References
- access.redhat.com/errata/RHSA-2025:23086 (vendor-advisory)
- access.redhat.com/security/cve/CVE-2025-11568 (vdb-entry)
- bugzilla.redhat.com/show_bug.cgi (issue-tracking)
- github.com/latchset/luksmeta/pull/16
- access.redhat.com/errata/RHSA-2026:18421 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:18824 (vendor-advisory)
Frequently asked questions
- What is CVE-2025-11568?
- CVE-2025-11568 is a medium-severity vulnerability in Latchset Luksmeta, classified under Improper Validation of Specified Quantity in Input. CVSS score: 4.4/10. Published 2025-10-15.
- How severe is CVE-2025-11568?
- Medium severity. CVSS v3 base score is 4.4 out of 10.