{"id":"CVE-2021-4122","revision":"6c5fd3100edb4414bde9a33974092cd9","records":[{"revision":"6c5fd3100edb4414bde9a33974092cd9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2021-4122","aliases":[],"title":"It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user …","description":"It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.","state":0,"publishedAt":"2022-08-24T15:08:58+00:00","modifiedAt":"2026-10-14T10:04:04.609+00:00","affected":[{"ecosystem":"Vendor product","name":"cryptsetup","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"cryptsetup\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"Fixed in cryptsetup 2.4.3, cryptsetup 2.3.7\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=2031859","https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.4/v2.4.3-ReleaseNotes","https://gitlab.com/cryptsetup/cryptsetup/-/commit/0113ac2d889c5322659ad0596d4cfc6da53e356c","https://bugzilla.redhat.com/show_bug.cgi?id=2032401","https://access.redhat.com/security/cve/CVE-2021-4122"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-4122","license":"CVE Program Terms of Use","key":"cve-program:CVE-2021-4122","identifiers":["CVE-2021-4122"]},"retained":false,"historicalAffected":[]}],"coverage":[]}