Improper Boundary Validation in Luksmeta Affects Red Hat Products

CVE-2026-111555

What is CVE-2026-111555?

A significant flaw in luksmeta arises from improper boundary validation of metadata slots, which permits attackers to redirect wipe or load operations. This vulnerability primarily affects those with the ability to supply or modify a disk header. By crafting a header with valid checksums, an attacker could overwrite or zero out encrypted payload data, leading to potential data loss and corruption. Typically, the exploitation of this vulnerability necessitates privileged access or manipulation of an administrator into processing an untrusted disk image.

References