◆ CVE Hub

CVE-2026-99087

dm-integrity: fix NULL pointer dereference when the 'R' flag is used

Published
2026-10-23
Last modified
2026-10-23
CNA
Linux
NVD status
Received

Fetching some sources has been requested. Reload in about a minute to see them.

CVSS v3.1 (listed by NVD)
—
Not scored
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
—
Not scored
EPSS exploit probability
0.2%
Percentile 10.2%
as of 2026-10-24
CISA KEV
—
Not listed

Description

NVD

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SB_FLAG_DIRTY_BITMAP flag set and the user activates the device in the 'R' mode, a crash in dm_integrity_resume happens because the function attempts to read the journal containing the bitmap. This patch makes dm-integrity skip any writes to the device in dm_integrity_resume if the device is activated in the 'R' mode.

Affected products and packages

CNA (CVE.org)

VendorProductVersions
LinuxLinux
affected: 468dfca38b1a6fbdccd195d875599cb7c8875cd9 … < 2e25842f0e4423e0efb243f56153d842ed6b933f
affected: 468dfca38b1a6fbdccd195d875599cb7c8875cd9 … < 69ed43ed8a174465fca1ba6bfbde53e4618c8956
affected: 468dfca38b1a6fbdccd195d875599cb7c8875cd9 … < 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84
default: unaffected
LinuxLinux
affected: 5.2
unaffected: 0 … < 5.2
unaffected: 6.18.58 … <= 6.18.*
unaffected: 7.2.12 … <= 7.2.*
unaffected: 7.3 … <= *
default: affected

Open-source packages (GitHub Advisory / OSV)

dm-integrity: fix NULL pointer dereference when the 'R' flag is used

EcosystemPackageAffected versionsFixed in
>= 468dfca38b1a6fbdccd195d875599cb7c8875cd9, < 2e25842f0e4423e0efb243f56153d842ed6b933f; < 69ed43ed8a174465fca1ba6bfbde53e4618c8956; < 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a842e25842f0e4423e0efb243f56153d842ed6b933f, 69ed43ed8a174465fca1ba6bfbde53e4618c8956, 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84
LinuxKernel>= 5.2.0, < 6.18.58; >= 6.19.0, < 7.2.126.18.58, 7.2.12

Linux distribution status

Red Hat ↗ Fetching

Debian ↗

ReleasePackageStatusFixed version / notes
bookwormlinuxopen not yet assigned
forkylinuxopen not yet assigned
sidlinuxresolved not yet assigned7.2.12-1
trixielinuxopen not yet assigned

Ubuntu ↗ Fetching

References (6)