CVE-2025-11568Medium· 4.4▾ SunlitA data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an enc…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 24.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 2.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.10%
0.10% → 0.1%
A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the available space, causing the metadata to overwrite and corrupt the user's encrypted data. This action leads to a permanent loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this issue.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-8813High· 7.5This affects versions of the package exifreader before 4.39.0
CVE-2026-118782High· 7.5Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count
CVE-2026-119186Medium· 5.9Forge: AES-GCM authentication bypass via unvalidated tagLength option
CVE-2026-33471Critical· 9.6nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
CVE-2026-114349NoneApache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches
CVE-2026-103594Critical· 9.5Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution