Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Ubuntu 20.04 LTS: USN-5286-1 Moderate: Cryptsetup Sensitive Exposure

ubuntu
Calendar Grey February 15, 2022
Dist Ubuntu Esm H88
A flaw in Cryptsetup exposes confidential data on Ubuntu machines, signaling a major security threat.
cryptsetup could be made to expose sensitive information.

Summary

cryptsetup could be made to expose sensitive information.

Software Description:

- cryptsetup: disk encryption support

Details:

Milan Broz discovered that cryptsetup incorrectly handled LUKS2

reencryption recovery. An attacker with physical access to modify the

encrypted device header may trigger the device to be unencrypted the next

time it is mounted by the user.

On Ubuntu 20.04 LTS, this issue was fixed by disabling the online

reencryption feature.

Topics%20covered

Topics Covered

security advisory security issue ubuntu disk encryption cryptsetup sensitive exposure

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
  cryptsetup                      2:2.3.7-0ubuntu0.21.10.1

Ubuntu 20.04 LTS:
  cryptsetup                      2:2.2.2-3ubuntu2.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5286-1

CVE-2021-4122

February 15, 2022

Topics%20covered

Topics Covered

security advisory security issue ubuntu disk encryption cryptsetup sensitive exposure

Package Information

https://launchpad.net/ubuntu/+source/cryptsetup/2:2.3.7-0ubuntu0.21.10.1
https://launchpad.net/ubuntu/+source/cryptsetup/2:2.2.2-3ubuntu2.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.