CVE-2026-107565

Published: Oct 8, 2026Modified: Oct 8, 2026

5.1

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L

Exploitability: 0.8 / Impact: 4.2

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free space or over existing records. This issue can corrupt stored encrypted payload data or existing metadata, potentially rendering the affected data inaccessible.

Related CWEs

CWE-1284

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (2)

https://access.redhat.com/security/cve/CVE-2026-107565

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2547930

Source: secalert@redhat.com

Timeline

No history available yet.