It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cryptsetup-devel | May 4, 2022 | Mar 18, 1975 |
| Alpine Linux | — | Upgrade cryptsetup | Mar 26, 2024 | Aug 24, 2022 |
| Centos_linux | — | Upgrade cryptsetup-debuginfoUpgrade veritysetupUpgrade cryptsetup-libs-debuginfoUpgrade cryptsetupUpgrade cryptsetup-reencryptUpgrade cryptsetup-debugsourceUpgrade integritysetup-debuginfoUpgrade veritysetup-debuginfoUpgrade cryptsetup-libsUpgrade cryptsetup-develUpgrade cryptsetup-reencrypt-debuginfoUpgrade integritysetup | Feb 17, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade cryptsetup | Nov 4, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cryptsetupUpgrade cryptsetup-reencrypt | Oct 11, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cryptsetupUpgrade cryptsetup-reencrypt | Jan 6, 2023 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cryptsetup-reencryptUpgrade cryptsetup | Sep 14, 2022 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade cryptsetup-reencryptUpgrade cryptsetup-develUpgrade integritysetupUpgrade cryptsetup-libsUpgrade cryptsetupUpgrade veritysetup | Feb 2, 2022 | Jan 13, 2022 |
| Redhat_linux | — | Upgrade cryptsetup-reencryptUpgrade veritysetupUpgrade cryptsetup-reencrypt-debuginfoUpgrade cryptsetup-develUpgrade integritysetup-debuginfoUpgrade cryptsetupUpgrade cryptsetup-libs-debuginfoUpgrade cryptsetup-debuginfoUpgrade integritysetupUpgrade cryptsetup-libsUpgrade veritysetup-debuginfoUpgrade cryptsetup-debugsource | Feb 2, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade cryptsetup-libs-debuginfoUpgrade veritysetup-debuginfoUpgrade integritysetupUpgrade cryptsetup-develUpgrade cryptsetup-reencryptUpgrade integritysetup-debuginfoUpgrade cryptsetup-reencrypt-debuginfoUpgrade cryptsetup-debuginfoUpgrade cryptsetup-libsUpgrade veritysetupUpgrade cryptsetupUpgrade cryptsetup-debugsource | May 5, 2022 | Feb 2, 2022 |
| Suse | — | Upgrade cryptsetupUpgrade cryptsetup-sshUpgrade libcryptsetup12-hmacUpgrade cryptsetup-langUpgrade libcryptsetup12-hmac-32bitUpgrade libcryptsetup-develUpgrade libcryptsetup12-32bitUpgrade libcryptsetup12 | Jan 21, 2022 | Jan 20, 2022 |
| Ubuntu | — | Upgrade cryptsetup | Mar 22, 2023 | Aug 24, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub