CLSA-2026-1779796898
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779796898.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1779796898
- Upstream
- Published
- 2026-05-26T12:01:42Z
- Modified
- 2026-10-26T09:31:06Z
- Summary
- luksmeta: Fix of CVE-2025-11568
- Details
-
- CVE-2025-11568: fix data corruption in luksmeta when writing metadata larger than the gap between the LUKS1 header and encrypted data area; add upfront size validation in find_gap() and a hard-limit boundary check inside overlap() to prevent overrunning the gap and corrupting encrypted user data
- References
Affected packages
TuxCare:AlmaLinux:9.6 / libluksmeta
Package
- Name
- libluksmeta
- Purl
- pkg:rpm/tuxcare/libluksmeta?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / libluksmeta-devel
Package
- Name
- libluksmeta-devel
- Purl
- pkg:rpm/tuxcare/libluksmeta-devel?distro=almalinux-9.6