It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cryptsetup-devel | May 4, 2022 | Mar 18, 1975 |
| Alpine Linux | — | Upgrade cryptsetup | Mar 26, 2024 | Aug 24, 2022 |
| Centos_linux | — | Upgrade cryptsetup-debuginfoUpgrade integritysetup-debuginfoUpgrade cryptsetup-libs-debuginfoUpgrade cryptsetupUpgrade cryptsetup-reencryptUpgrade cryptsetup-debugsourceUpgrade veritysetupUpgrade cryptsetup-develUpgrade cryptsetup-libsUpgrade veritysetup-debuginfoUpgrade integritysetupUpgrade cryptsetup-reencrypt-debuginfo | Feb 17, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade cryptsetup | Nov 4, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cryptsetupUpgrade cryptsetup-reencrypt | Oct 11, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cryptsetupUpgrade cryptsetup-reencrypt | Jan 6, 2023 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cryptsetup-reencryptUpgrade cryptsetup | Sep 14, 2022 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade cryptsetup-develUpgrade cryptsetup-reencryptUpgrade integritysetupUpgrade cryptsetup-libsUpgrade cryptsetupUpgrade veritysetup | Feb 2, 2022 | Jan 13, 2022 |
| Redhat_linux | — | Upgrade veritysetupUpgrade cryptsetup-reencryptUpgrade cryptsetup-reencrypt-debuginfoUpgrade cryptsetup-develUpgrade integritysetupUpgrade cryptsetup-debuginfoUpgrade veritysetup-debuginfoUpgrade cryptsetup-libs-debuginfoUpgrade integritysetup-debuginfoUpgrade cryptsetupUpgrade cryptsetup-libsUpgrade cryptsetup-debugsource | Feb 2, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade veritysetup-debuginfoUpgrade integritysetupUpgrade cryptsetup-develUpgrade cryptsetup-reencryptUpgrade cryptsetup-libs-debuginfoUpgrade integritysetup-debuginfoUpgrade veritysetupUpgrade cryptsetup-debugsourceUpgrade cryptsetupUpgrade cryptsetup-reencrypt-debuginfoUpgrade cryptsetup-debuginfoUpgrade cryptsetup-libs | May 5, 2022 | Feb 2, 2022 |
| Suse | — | Upgrade libcryptsetup12-hmac-32bitUpgrade cryptsetup-langUpgrade libcryptsetup-develUpgrade libcryptsetup12-hmacUpgrade cryptsetupUpgrade cryptsetup-sshUpgrade libcryptsetup12Upgrade libcryptsetup12-32bit | Jan 21, 2022 | Jan 20, 2022 |
| Ubuntu | — | Upgrade cryptsetup | Mar 22, 2023 | Aug 24, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub