CVE-2026-107565
Last modified
CVE-2026-107565 is a medium-severity vulnerability rated 5.1/10 on the CVSS scale. A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device.
Description
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free space or over existing records. This issue can corrupt stored encrypted payload data or existing metadata, potentially rendering the affected data inaccessible.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | All versions |
| Red Hat | Red Hat Enterprise Linux 7 | All versions |
| Red Hat | Red Hat Enterprise Linux 8 | All versions |
| Red Hat | Red Hat Enterprise Linux 9 | All versions |
| Red Hat | Red Hat OpenShift Container Platform 4 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-107565?
How severe is CVE-2026-107565?
How do I fix CVE-2026-107565?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-107503Unvalidated environments URL allows OAuth authorization code…7.1
- CVE-2026-10751IBM MQ Java and JMS client libraries could allow an authenti…7.5
- CVE-2026-107510An authenticated high privilege user can inject arguments in…9.1
- CVE-2026-10753The Site Kit by Google WordPress plugin before 1.176.0 does…2.7
- CVE-2026-10754Pega Platform versions 8.5.0 through 25.1.2 are affected by …8.6
- CVE-2026-10755The All in One SEO WordPress plugin before 4.9.9 does not c…2.7
- CVE-2026-107570heap OOB write in convert_file_from_to() via a crafted Conte…2.5
- CVE-2026-107572Inefficient complexity in the Sieve filter evaluation of Pro…6.5
- CVE-2026-107573Incorrect default permissions in the Windows installer of Pr…7.8
- CVE-2026-107574Inefficient algorithmic complexity in the JSON reader of Pro…7.5
- CVE-2026-107575Inefficient algorithmic complexity in the SPF macro expansio…5.3
- CVE-2026-107576Inefficient algorithmic complexity in the inbound DKIM and A…7.5
Are you affected by CVE-2026-107565?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST