A flaw in the luksmeta subsystem allows an attacker who can supply or modify a disk header to redirect wipe or load operations outside the designated metadata region. The improper boundary validation permits the attacker to overwrite or zero out parts of the encrypted payload, causing persistent data loss and corrupted storage. Successful exploitation can lead to the loss of all data on the affected block device and compromise the integrity of the storage environment.

The vulnerability affects all Red Hat products listed in the CNA data: Red Hat Enterprise Linux 10, 7, 8, and 9, as well as Red Hat OpenShift Container Platform 4. No version constraints were specified in the CNA affected-version information, so the entire product line for the mentioned releases is considered vulnerable.

The CVSS score of 6.0 indicates a medium severity risk. The EPSS score is not available, and the issue is not currently listed in the CISA Known Exploited Vulnerabilities catalog. The attack vector is inferred to require privileged access to raw block devices or the ability to convince an administrator to load an untrusted disk image. Because the vulnerability can cause irreversible data loss and requires only local or social‑engineering privileges, the overall threat is moderate but potentially significant for environments where unattended block device access is possible.