THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-11568 (MEDIUM 4.4) — A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correct

[NVD] CVE-2025-11568 (MEDIUM 4.4) — A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correct

lownvdPublished 2025-10-15

CVE-2025-11568 CVSS: 4.4 MEDIUM Published: 2025-10-15T20:15:34.007

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadat

Indicators of compromise

CVE-2025-11568cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-11568