https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T13:08:33.539491+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-4122 CVE-2021-4122 2026-10-06T13:08:33.541132+00:00

Affected: cryptsetup

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.

 https://vulnerability.circl.lu/vuln/usn-5286-1 USN-5286-1 — cryptsetup vulnerability 2026-10-06T13:08:33.541246+00:00

Affected: Ubuntu:20.04:LTS: cryptsetup

Milan Broz discovered that cryptsetup incorrectly handled LUKS2 reencryption recovery. An attacker with physical access to modify the encrypted device header may trigger the device to be unencrypted the next time it is mounted by the user.

On Ubuntu 20.04 LTS, this issue was fixed by disabling the online reencryption feature.