CVE-2025-11568

libluksmeta: LUKSMeta is a simple library for storing metadata in the LUKSv1 header

CVE-2025-11568 is fixed in 6 products on 1 platform, first by RHSA-2026:18421, released October 14, 2025. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
4.4
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0010
0th percentile

LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in Red Hat Enterprise Linux. Security Fix(es): * luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
libluksmeta · Fedora 43 10-1.fc43 FEDORA-2025-E53E8FDC0A Oct 31, 2025
libluksmeta · RHEL 8 0:9-4.el8_10.1 RHSA-2025:23086 Dec 11, 2025
libluksmeta · RHEL 9 0:10-1.el9 RHSA-2026:18824 May 27, 2026
libluksmeta · almalinux 10 10-1.el10 ALSA-2026:18421 May 19, 2026
libluksmeta · almalinux 8 9-4.el8_10.1 ALSA-2025:23086 Dec 11, 2025
libluksmeta · almalinux 9 10-1.el9 ALSA-2026:18824 May 19, 2026
libluksmeta · ol 10 0:10-1.el10 ELSA-2026-18421 Jul 8, 2026
libluksmeta · ol 8 0:9-4.el8_10.1 ELSA-2025-23086 Dec 10, 2025
libluksmeta · ol 9 0:10-1.el9 ELSA-2026-18824 Jun 12, 2026
libluksmeta-debuginfo · Fedora 43 10-1.fc43 FEDORA-2025-E53E8FDC0A Oct 31, 2025
libluksmeta-devel · Fedora 43 10-1.fc43 FEDORA-2025-E53E8FDC0A Oct 31, 2025
libluksmeta-devel · RHEL 8 0:9-4.el8_10.1 RHSA-2025:23086 Dec 11, 2025
libluksmeta-devel · RHEL 9 0:10-1.el9 RHSA-2026:18824 May 27, 2026
libluksmeta-devel · almalinux 10 10-1.el10 ALSA-2026:18421 May 19, 2026
libluksmeta-devel · almalinux 8 9-4.el8_10.1 ALSA-2025:23086 Dec 11, 2025
libluksmeta-devel · almalinux 9 10-1.el9 ALSA-2026:18824 May 19, 2026
libluksmeta-devel · ol 10 0:10-1.el10 ELSA-2026-18421 Jul 8, 2026
libluksmeta-devel · ol 8 0:9-4.el8_10.1 ELSA-2025-23086 Dec 10, 2025
libluksmeta-devel · ol 9 0:10-1.el9 ELSA-2026-18824 Jun 12, 2026
luksmeta · Debian 12.15 (bookworm) 9-4+deb12u1 DEBIAN-CVE-2025-11568 Oct 15, 2025
luksmeta · Debian 13.5 (trixie) 9-4+deb13u1 DEBIAN-CVE-2025-11568 Oct 15, 2025
luksmeta · Debian 14 10-1 DEBIAN-CVE-2025-11568 Oct 15, 2025
luksmeta · Fedora 43 10-1.fc43 FEDORA-2025-E53E8FDC0A Oct 31, 2025
luksmeta · RHEL 10 10-1.el10 RHSA-2026:18421 Oct 14, 2025
luksmeta · RHEL 8 0:9-4.el8_10.1 RHSA-2025:23086 Dec 11, 2025
luksmeta · RHEL 9 0:10-1.el9 RHSA-2026:18824 May 27, 2026
luksmeta · almalinux 10 10-1.el10 ALSA-2026:18421 May 19, 2026
luksmeta · almalinux 8 9-4.el8_10.1 ALSA-2025:23086 Dec 11, 2025
luksmeta · almalinux 9 10-1.el9 ALSA-2026:18824 May 19, 2026
luksmeta · ol 10 0:10-1.el10 ELSA-2026-18421 Jul 8, 2026
luksmeta · ol 8 0:9-4.el8_10.1 ELSA-2025-23086 Dec 10, 2025
luksmeta · ol 9 0:10-1.el9 ELSA-2026-18824 Jun 12, 2026
luksmeta · rocky 10 0:10-1.el10 RLSA-2026:18421 May 29, 2026
luksmeta · rocky 8 0:9-4.el8_10.1 RLSA-2025:23086 Dec 13, 2025
luksmeta · rocky 9 0:10-1.el9 RLSA-2026:18824 May 28, 2026
luksmeta-debuginfo · Fedora 43 10-1.fc43 FEDORA-2025-E53E8FDC0A Oct 31, 2025
luksmeta-debugsource · Fedora 43 10-1.fc43 FEDORA-2025-E53E8FDC0A Oct 31, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.