Linux Kernel Vulnerability in Block Handling Affecting Metadata Verification and Generation

CVE-2026-93257

What is CVE-2026-93257?

A vulnerability in the Linux kernel's block layer was identified, which improperly handled the nogenerate and noverify flags in fs-integrity. This oversight allowed the generation and verification of metadata to incorrectly process non-PI data, leading to possible system crashes during metadata verification. The fix ensures that the BIP_CHECK flags are properly checked before executing these operations, aligning the behavior with the block layer's auto-generated metadata protocol. Users should update to the latest kernel version to mitigate any risks associated with this issue.

References