---
id: 1329
title: "Vulnerabilities in LUKS2 disk encryption for confidential VMs"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2025/10/30/vulnerabilities-in-luks2-disk-encryption-for-confidential-vms/"
published_at: "2025-10-30 11:00"
tags: ["confidential-computing", "disk-encryption", "cryptsetup", "vulnerability-disclosure", "tee", "luks2"]
phying_url: "https://phying.com/item/1329"
lang: en
---

# Vulnerabilities in LUKS2 disk encryption for confidential VMs

## Summary

New LUKS2 flaws (CVE-2025-59054, CVE-2025-58356) affect eight confidential VM systems: malleable headers let disk-level attackers trick TEE guests into encrypting secrets with a null cipher.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2025-10-30 11:00
- **Original:** https://blog.trailofbits.com/2025/10/30/vulnerabilities-in-luks2-disk-encryption-for-confidential-vms/
- **Phying News:** https://phying.com/item/1329