Red Hat luksmeta Utility Data Corruption Vulnerability in LUKS1 Encryption

A data corruption vulnerability exists in the luksmeta utility when applied to devices using the LUKS1 disk encryption format. This issue arises because the utility improperly validates the available space, allowing an attacker with the necessary permissions to write excessive metadata that overwrites and corrupts the user's encrypted data. As a result, the stored information is permanently lost. This vulnerability does not affect devices encrypted with LUKS formats other than LUKS1.

Impact

Exploitation of this vulnerability leads to permanent data loss by overwriting encrypted information on the affected device.