All vulnerabilities
CVE-2026-99087

Linux: dm-integrity: fix NULL pointer dereference when the 'R' flag is used

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in2e25842f0e4423e0efb243f56153d842ed6b933fAlso 69ed43ed8a174465fca1ba6bfbde53e4618c8956, 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84CVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 2e25842f0e4423e0efb243f56153d842ed6b933fLinuxCVE List
  • 69ed43ed8a174465fca1ba6bfbde53e4618c8956LinuxCVE List
  • 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

dm-integrity: fix NULL pointer dereference when the 'R' flag is used

If the dm-integrity device has the SB_FLAG_DIRTY_BITMAP flag set and the user activates the device in the 'R' mode, a crash in dm_integrity_resume happens because the function attempts to read the journal containing the bitmap.

This patch makes dm-integrity skip any writes to the device in dm_integrity_resume if the device is activated in the 'R' mode.

Text from CVE List

Affected versions 8

  • Linuxaffected: 468dfca38b1a6fbdccd195d875599cb7c8875cd9 before 2e25842f0e4423e0efb243f56153d842ed6b933fCVE List
  • Linuxaffected: 468dfca38b1a6fbdccd195d875599cb7c8875cd9 before 69ed43ed8a174465fca1ba6bfbde53e4618c8956CVE List
  • Linuxaffected: 468dfca38b1a6fbdccd195d875599cb7c8875cd9 before 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84CVE List
  • Linuxaffected: 5.2CVE List
  • Linuxunaffected: all versions before 5.2CVE List
  • Linuxunaffected: 6.18.58 through 6.18.*CVE List
  • Linuxunaffected: 7.2.12 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3