PT-2026-64069 · Opensuse · Cryptsetup
Published
2026-07-13
·
Updated
2026-07-13
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
This update for cryptsetup fixes the following issues:
Changes in cryptsetup:
- Fix for (bsc#1270254) to avoid undesired pinning of all volume keys (via the thread keyring) through the caller's credentials when the kernel opens a file. This is due to the refactoring in kernel commit a28d893eb327 ("md: port block device access to file") that accidentally causes the caller's thread keyring to be kept alive long beyond the caller's lifetime, the kernel part is tracked in (bsc#1270252).
- Add keyring key type. [b6fb6fc0]
- Load volume keys in intermediary keyring linked in thread keyring. [413a3dd0]
- Use unique intermediary keyring name per device. [04ef07a7]
- Add regression tests. [bfcb0c38, bb5e8e9f, e6573494, aa214c09]
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Cryptsetup