SUSE-SU-2026:22602-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2026:22602-1

Published

2026-07-13T16:23:40Z

Modified

2026-07-16T18:24:39Z

Summary

Security update for cryptsetup

Details

This update for cryptsetup fixes the following issues:

Changes in cryptsetup:

Fix for (bsc#1270254) to avoid undesired pinning of all volume keys (via the thread keyring) through the caller's credentials when the kernel opens a file. This is due to the refactoring in kernel commit a28d893eb327 ("md: port block device access to file") that accidentally causes the caller's thread keyring to be kept alive long beyond the caller's lifetime, the kernel part is tracked in (bsc#1270252).
- Add keyring key type. [b6fb6fc0]
- Load volume keys in intermediary keyring linked in thread keyring. [413a3dd0]
- Use unique intermediary keyring name per device. [04ef07a7]
- Add regression tests. [bfcb0c38, bb5e8e9f, e6573494, aa214c09]

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.8.4-160000.2.1

{
    "binaries":  [
        {
            "cryptsetup":  "2.8.4-160000.2.1",
            "libcryptsetup12":  "2.8.4-160000.2.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22602-1.json"