CVE-2026-107565
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
30/100
Published: 2026-10-08
Modified: 2026-11-05
First seen: 2026-10-31
Status: active
Attack Surface
Low Complexity
No Interaction
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
High
UI:
None
S:
Unchanged
C:
None
I:
High
A:
Low
Description
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free space or over existing records. This issue can corrupt stored encrypted payload data or existing metadata, potentially rendering the affected data inaccessible.