luksmeta vulnerabilities

A flaw was found in luksmeta involving improper boundary validation of metadata slots. An attacker able to supply or modify a disk header can redirect wipe or load operations outside the intended metadata area, overwriting or zeroing out encrypted payload data and causing persistent data loss.

A flaw was found in luksmeta involving incorrect boundary calculations and flawed overlap detection. A local attacker with administrative privileges can write new metadata entries beyond available free space or over existing records, corrupting data on a LUKS device.

A data corruption vulnerability in the luksmeta utility for LUKS1 allows overwriting encrypted data by writing excessive metadata. Lack of space validation leads to permanent loss of user data.