openSUSE-SU-2026:21325-1
Security update for cryptsetup
openSUSE-SU-2026:21325-1 is a vulnerability with no CVSS score yet in cryptsetup, published July 13, 2026. No source lists public exploit code. Fixed in cryptsetup 2.8.4-160000.2.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.8.4-160000.2.1cryptsetup
Description
This update for cryptsetup fixes the following issues:
Changes in cryptsetup:
Fix for (bsc#1270254) to avoid undesired pinning of all volume keys (via the thread keyring) through the caller's credentials when the kernel opens a file. This is due to the refactoring in kernel commit a28d893eb327 ("md: port block device access to file") that accidentally causes the caller's thread keyring to be kept alive long beyond the caller's lifetime, the kernel part is tracked in (bsc#1270252).
- Add keyring key type. [b6fb6fc0]
- Load volume keys in intermediary keyring linked in thread keyring. [413a3dd0]
- Use unique intermediary keyring name per device. [04ef07a7]
- Add regression tests. [bfcb0c38, bb5e8e9f, e6573494, aa214c09]
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cryptsetupopenSUSE:Leap 16.0 | before 2.8.4-160000.2.1 | 2.8.4-160000.2.1 |
What each source reports
OSVNo score
Security update for cryptsetup
This update for cryptsetup fixes the following issues:
Changes in cryptsetup:
Fix for (bsc#1270254) to avoid undesired pinning of all volume keys (via the thread keyring) through the caller's credentials when the kernel opens a file. This is due to the refactoring in kernel commit a28d893eb327 ("md: port block device access to file") that accidentally causes the caller's thread keyring to be kept alive long beyond the caller's lifetime, the kernel part is tracked in (bsc#1270252).
- Add keyring key type. [b6fb6fc0]
- Load volume keys in intermediary keyring linked in thread keyring. [413a3dd0]
- Use unique intermediary keyring name per device. [04ef07a7]
- Add regression tests. [bfcb0c38, bb5e8e9f, e6573494, aa214c09]
- Record
openSUSE-SU-2026:21325-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.