All vulnerabilities
CVE-2026-93257

Linux: block: handle nogenerate/noverify properly in fs-integrity

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.19%Chance of exploitation activity in the next 30 days, higher than 8% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3bf9a21e7bccfd8c35b440efd114c61cc9838a41Fixed versionCVE List
Published24 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 3bf9a21e7bccfd8c35b440efd114c61cc9838a41LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

block: handle nogenerate/noverify properly in fs-integrity

Check the BIP_CHECK flags before generating or verifying PI information, otherwise this can be incorrectly called for non-PI metadata and cause generation of incorrect metadata and crashed in the verification handler.

The new behavior matches that of the block layer auto-generated metadata.

Text from CVE List

Affected versions 6

  • Linuxaffected: 0bde8a12b5540572a7fd6d2867bee6de15e4f289 before b681c740e6d645f7d7477e9208db57917c6c0fbcCVE List
  • Linuxaffected: 0bde8a12b5540572a7fd6d2867bee6de15e4f289 before 3bf9a21e7bccfd8c35b440efd114c61cc9838a41CVE List
  • Linuxaffected: 7.1CVE List
  • Linuxunaffected: all versions before 7.1CVE List
  • Linuxunaffected: 7.2.6 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 2