Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Mageia 8 MGASA-2022-0047 Critical: Cryptsetup Decryption Issue

mageia
Calendar Grey February 3, 2022
Dist Mageia Esm H88
MGASA-2022-0048 tackles a vulnerability in the systemd package that could enable malicious users to exploit services and escalate privileges.
An attacker can modify on-disk metadata to simulate decryption in progress with crashed (unfinished) reencryption step and persistently decrypt part of the LUKS device (CVE-2021-41...

Summary

An attacker can modify on-disk metadata to simulate decryption in progress with crashed (unfinished) reencryption step and persistently decrypt part of the LUKS device (CVE-2021-4122).

References

- https://bugs.mageia.org/show_bug.cgi?id=29884

- https://www.openwall.com/lists/oss-security/2022/01/13/2

- https://www.cve.org/CVERecord?id=CVE-2021-4122

Topics%20covered

Topics Covered

security advisory critical risk decryption threat cryptsetup Mageia LUKS device

Resolution

SRPMS

- 8/core/cryptsetup-2.3.7-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 03 Feb 2022
URL: https://advisories.mageia.org/MGASA-2022-0047.html
Type: security
CVE: CVE-2021-4122

Topics%20covered

Topics Covered

security advisory critical risk decryption threat cryptsetup Mageia LUKS device

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here