NULL Pointer Dereference in Linux Kernel's dm-integrity Device
CVE-2026-99087

Currently unrated

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
23 October 2026

What is CVE-2026-99087?

A vulnerability in the Linux kernel's dm-integrity device related to a NULL pointer dereference has been addressed. When the SB_FLAG_DIRTY_BITMAP flag is set and the device is activated in 'R' mode, the dm_integrity_resume function may crash due to an invalid journal read attempt. This issue has been mitigated by updating the dm-integrity logic to prevent writes during 'R' mode activation, enhancing overall system stability.

Affected Version(s)

Linux 468dfca38b1a6fbdccd195d875599cb7c8875cd9 < 2e25842f0e4423e0efb243f56153d842ed6b933f

Linux 468dfca38b1a6fbdccd195d875599cb7c8875cd9 < 69ed43ed8a174465fca1ba6bfbde53e4618c8956

Linux 468dfca38b1a6fbdccd195d875599cb7c8875cd9 < 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.