luksmeta vulnerabilities
CVEs whose affected-version data names the luksmeta package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111555Medium· 6.0Luksmeta: missing slot-range validation permits out-of-gap device i/o
A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exp…
▾ SunlitRed Hat · luksmetaEPSS 0.11%via CVEORG
CVE-2026-107565Medium· 5.1A flaw was found in luksmeta
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap detection,…
▾ SunlitRed Hat · luksmetaEPSS 0.10%via NVD