It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cryptsetup-devel | May 4, 2022 | Mar 18, 1975 |
| Alpine Linux | — | Upgrade cryptsetup | Mar 26, 2024 | Aug 24, 2022 |
| Centos_linux | — | Upgrade cryptsetup-libs-debuginfoUpgrade cryptsetup-reencryptUpgrade integritysetup-debuginfoUpgrade cryptsetupUpgrade veritysetupUpgrade cryptsetup-debugsourceUpgrade cryptsetup-debuginfoUpgrade cryptsetup-reencrypt-debuginfoUpgrade cryptsetup-libsUpgrade integritysetupUpgrade cryptsetup-develUpgrade veritysetup-debuginfo | Feb 17, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade cryptsetup | Nov 4, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cryptsetup-reencryptUpgrade cryptsetup | Oct 11, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cryptsetupUpgrade cryptsetup-reencrypt | Jan 6, 2023 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cryptsetupUpgrade cryptsetup-reencrypt | Sep 14, 2022 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade cryptsetup-reencryptUpgrade cryptsetup-develUpgrade veritysetupUpgrade integritysetupUpgrade cryptsetupUpgrade cryptsetup-libs | Feb 2, 2022 | Jan 13, 2022 |
| Redhat_linux | — | Upgrade cryptsetup-develUpgrade cryptsetup-reencrypt-debuginfoUpgrade veritysetupUpgrade cryptsetup-reencryptUpgrade cryptsetup-debugsourceUpgrade cryptsetup-libsUpgrade cryptsetup-debuginfoUpgrade integritysetup-debuginfoUpgrade integritysetupUpgrade cryptsetupUpgrade veritysetup-debuginfoUpgrade cryptsetup-libs-debuginfo | Feb 2, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade cryptsetup-debugsourceUpgrade veritysetupUpgrade cryptsetupUpgrade cryptsetup-reencrypt-debuginfoUpgrade cryptsetup-libsUpgrade cryptsetup-debuginfoUpgrade integritysetup-debuginfoUpgrade cryptsetup-libs-debuginfoUpgrade integritysetupUpgrade veritysetup-debuginfoUpgrade cryptsetup-develUpgrade cryptsetup-reencrypt | May 5, 2022 | Feb 2, 2022 |
| Suse | — | Upgrade cryptsetupUpgrade libcryptsetup12-hmac-32bitUpgrade libcryptsetup12-hmacUpgrade cryptsetup-sshUpgrade cryptsetup-langUpgrade libcryptsetup-develUpgrade libcryptsetup12Upgrade libcryptsetup12-32bit | Jan 21, 2022 | Jan 20, 2022 |
| Ubuntu | — | Upgrade cryptsetup | Mar 22, 2023 | Aug 24, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub