CVE-2026-89989

CVE-2026-89989 affects the Linux kernel's IMA (Integrity Measurement Architecture) subsystem. In validate_hash_algo(), the return value of dentry_path() is passed directly to integrity_audit_msg() without checking for error pointers. When a path exceeds the buffer, dentry_path() returns ERR_PTR(-...

CVE-2026-89989 ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()

In the Linux kernel, the following vulnerability has been resolved: ima: Check for ERRPTR from dentrypath in validatehashalgo dentrypath returns ERRPTR-ENAMETOOLONG when the path exceeds the buffer. validatehashalgo passes the result straight to integrityauditmsg without checking. ERRPTR is not...