UBUNTU-CVE-2026-99051

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.0. It stems from fsveritygetinfo in fsverity calling rhashtablelookupfast under rcureadlock, without direct synchronization with fsverityremoveinfo. This can lead to use-after-free issues when handling multiple inodes concurrently...