CVE-2025-11568: Improper Validation of Specified Quantity in Input in Latchset luksmeta
Description
CVE-2025-11568 is a moderate severity vulnerability in the luksmeta library, which is used for storing metadata in the LUKSv1 header and is a dependency of clevis and tang packages in Red Hat Enterprise Linux. The vulnerability involves improper validation of specified quantity in input, leading to potential data corruption when handling LUKS1 partitions. A security update addressing this issue has been released by Red Hat for multiple architectures and versions of Red Hat Enterprise Linux 8 and 10.
CVSS v3.1
Score 4.4medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2025-11568 affects the luksmeta library, a component responsible for metadata storage in LUKSv1 headers. It arises from improper validation of input quantities, which can cause data corruption when processing LUKS1 partitions. This library is a dependency of clevis and tang, which provide Network Bound Disk Encryption (NBDE) in Red Hat Enterprise Linux. Red Hat has issued a security advisory (RHSA-2025:23086) and released updated packages to fix this issue in affected versions of Red Hat Enterprise Linux 8 and 10 across multiple architectures including x86_64, aarch64, ppc64le, and s390x.
Potential Impact
The vulnerability can lead to data corruption on LUKS1 encrypted partitions when processed with the vulnerable luksmeta library. There is no direct confidentiality or availability impact reported. The CVSS v3.1 base score is 4.4 (medium severity), reflecting limited impact but potential integrity issues. No known exploits in the wild have been reported.
Mitigation Recommendations
Red Hat has released official security updates that fix this vulnerability. Users should apply the provided patches as per the Red Hat advisory RHSA-2025:23086. The advisory includes updated packages for Red Hat Enterprise Linux 8 and 10 on supported architectures. No additional mitigation steps are required beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:18824
- Cve Count
- 1
Threat ID: 6a3da1c64853345fc18204a0
Added to database: 06/25/2026, 21:46:46 UTC
Last enriched: 09/17/2026, 22:47:47 UTC
Last updated: 10/06/2026, 06:48:11 UTC
Views: 35
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.