The luksmeta utility, which manages metadata in the LUKSv1 header, contains a flaw where it fails to properly validate the available space before writing metadata. An attacker with necessary permissions can exploit this by writing excessive metadata to a LUKS1 encrypted device, causing metadata to overwrite and corrupt the encrypted data. This results in permanent data loss. The vulnerability does not affect LUKS formats other than LUKS1. Red Hat advisories RHSA-2025:23086 and RHSA-2026:18421 provide patches for Red Hat Enterprise Linux versions 8 and 10 respectively.

Exploitation leads to permanent corruption and loss of encrypted data on LUKS1 partitions due to improper validation of metadata size in luksmeta. There is no direct confidentiality or availability impact reported, but the integrity of encrypted data is compromised. Only users with appropriate permissions can trigger this condition. No known exploits in the wild have been reported.

Official patches are available from Red Hat for Red Hat Enterprise Linux 8 and 10 distributions. Users should apply the updated luksmeta packages as described in Red Hat advisories RHSA-2025:23086 and RHSA-2026:18421. The vendor manages remediation for these affected products through these updates. No additional mitigation steps are indicated beyond applying the official fixes.