Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-18824

Опубликовано: 12 июн. 2026
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2026-18824: luksmeta security update (MODERATE)

[10-1]

  • New upstream release v10 Resolves: RHEL-122139

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

libluksmeta

10-1.el9

libluksmeta-devel

10-1.el9

luksmeta

10-1.el9

Oracle Linux x86_64

libluksmeta

10-1.el9

libluksmeta-devel

10-1.el9

luksmeta

10-1.el9

Связанные CVE

Связанные уязвимости

CVSS3: 4.4
ubuntu
10 месяцев назад

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user's encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.

CVSS3: 4.4
redhat
10 месяцев назад

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user's encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.

CVSS3: 4.4
nvd
10 месяцев назад

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user's encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.

CVSS3: 4.4
debian
10 месяцев назад

A data corruption vulnerability has been identified in the luksmeta ut ...

rocky
2 месяца назад

Moderate: luksmeta security update