SUSE · Security update for cryptsetup
Affects SUSESource GCVE Database
Rated by Threat Radar
Data as of 26 Oct 2026, 16:19 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| SUSE Product Security Team SUSE | Affected
| Fixed in– |
AI-suggested
A security update for cryptsetup has been released that addresses this issue by implementing an intermediary keyring per device and other fixes. Users should apply the official cryptsetup update from their vendor to remediate this vulnerability. No additional mitigations are specified or required beyond applying the update.
Description
A security update for cryptsetup addresses an issue where volume keys could be undesirably pinned in the kernel's thread keyring due to a kernel refactoring. This caused the caller's thread keyring to remain alive longer than intended, potentially affecting key management. The update introduces an intermediary keyring per device to isolate volume keys and includes regression tests to prevent recurrence.