Buffer Overflow Vulnerability in Linux Kernel's dm-integrity Product

CVE-2026-99098

What is CVE-2026-99098?

A buffer overflow vulnerability exists in the Linux kernel's dm-integrity module when operating in inline mode with an unusually large tag size. Specifically, during integrity checks, the module computes checksums using a stack buffer of a predetermined size (HASH_MAX_DIGESTSIZE). However, if the user-defined tag size exceeds this limit, it can lead to buffer overflow during padding operations. This scenario can result in a kernel panic when the integrity_check function is triggered. It's important to note that this issue can only be exploited by users with root privileges, making it a significant yet controlled risk. Updating to the latest kernel version, which includes modifications to expand the relevant buffers to accommodate larger tag sizes, is recommended to maintain system stability.

References