213 matches found
CVE-2026-99135
The Linux kernel contains a vulnerability in dm-integrity where handling a discard operation with a large tag size can trigger an infinite loop . The issue occurs when kmalloc fails and the system falls back to the checksums_onstack array; if the tag size exceeds HASH_MAX_DIGESTSIZE, max_blocks b...
CVE-2026-99087
A flaw was found in the Linux kernel's device-mapper integrity dm-integrity subsystem. A local user with administrative privileges can cause a Denial of Service DoS by activating a storage device in read-only mode when dirty journal bitmap flags are set. This issue occurs because the driver...
CVE-2026-99086
A flaw was found in the Linux kernel's dm-integrity subsystem. When resuming a suspended integrity device, the kernel re-reads the storage metadata superblock without verifying that its layout matches the initial configuration. A local attacker with access to the underlying storage device could...
CVE-2026-99098
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each block into an on-stack buffer of HASHMAXDIGESTSIZE bytes...
CVE-2026-99098 dm-integrity: fix buffer overflow in inline mode with large tag size
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each block into an on-stack buffer of HASHMAXDIGESTSIZE bytes...
CVE-2026-99098 dm-integrity: fix buffer overflow in inline mode with large tag size
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each block into an on-stack buffer of HASHMAXDIGESTSIZE bytes...
CVE-2026-99098
The Linux kernel contains a buffer overflow vulnerability in the dm-integrity component when using inline mode with a large tag size. Specifically, the functions dm_integrity_check and dm_integrity_inline_recheck use an on-stack buffer of HASH_MAX_DIGESTSIZE bytes to compute block checksums. If t...
EUVD-2026-109904
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each block into an on-stack buffer of HASHMAXDIGESTSIZE bytes...
UBUNTU-CVE-2026-99087
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...
UBUNTU-CVE-2026-99086
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dmintegrityresume re-reads the superblock from the device so that it picks up the flags and the recalculate position. It performs no validation on the result, while the constructor...
CVE-2026-99087
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...
CVE-2026-99086
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dmintegrityresume re-reads the superblock from the device so that it picks up the flags and the recalculate position. It performs no validation on the result, while the constructor...
SUSE CVE-2026-99086
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dmintegrityresume re-reads the superblock from the device so that it picks up the flags and the recalculate position. It performs no validation on the result, while the constructor...
CVE-2026-99087
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...
CVE-2026-99086
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dmintegrityresume re-reads the superblock from the device so that it picks up the flags and the recalculate position. It performs no validation on the result, while the constructor...
DEBIAN-CVE-2026-99087
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...
DEBIAN-CVE-2026-99086
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dmintegrityresume re-reads the superblock from the device so that it picks up the flags and the recalculate position. It performs no validation on the result, while the constructor...
CVE-2026-99087
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...
CVE-2026-99087
The Linux kernel contains a vulnerability in the dm-integrity component where a NULL pointer dereference occurs during dm_integrity_resume. This issue is triggered when a device has the SB_FLAG_DIRTY_BITMAP flag set and is activated in 'R' mode , causing the function to incorrectly attempt to rea...
EUVD-2026-108938
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...