← All credits

This issue was discovered by Sergio Correia (Red Hat).

5 vulnerability records and advisories credit this contributor.

CVE-2026-111555

Luksmeta: missing slot-range validation permits out-of-gap device i/o

CVE-2026-109971

Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool

CVE-2026-109970

Clevis: clevis: pkcs#11 token pin written to world-readable file

CVE-2026-109969

Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask

CVE-2026-109968

Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file