Skip to main content
← All vulnerabilities
CVE-2026-72099

dm-integrity: don't increment hash_offset twice

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.266, 5.15.217, 6.1.184, 6.6.145, 6.12.97, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for (i = 0; i < to_copy; i++, ts--)". Do not increment it again.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 84597a44a9d86ac949900441cea7da0af0f2f473 · fixed in c66b1781a54984227e94b862be9328d81d81e51c; From 84597a44a9d86ac949900441cea7da0af0f2f473 · fixed in 39697e2759ac23e65361fe61482f8174cad8a752; From 84597a44a9d86ac949900441cea7da0af0f2f473 · fixed in e6646f4d711d74930d39cce6fb7bfcae4cbee5fd; From 84597a44a9d86ac949900441cea7da0af0f2f473 · fixed in cf9feed8c131e303ecf2afebe6f791be018818ad; From 84597a44a9d86ac949900441cea7da0af0f2f473 · fixed in 4f4e43337e9ef322595201cfc24def50fd624219; From 84597a44a9d86ac949900441cea7da0af0f2f473 · fixed in 5dfd8042635278613da3b88553e25ade2103cd58; From 84597a44a9d86ac949900441cea7da0af0f2f473 · fixed in 829476c06496aab018f14127c055adb164d1a750; From 84597a44a9d86ac949900441cea7da0af0f2f473 · fixed in edf025f083854f80032b73a1aad69a3c90db236f

  • Linux Linux

    5.7

  • KernelLinux

    From 5.7.0 · fixed in 5.10.266; From 5.11.0 · fixed in 5.15.217; From 5.16.0 · fixed in 6.1.184; From 6.2.0 · fixed in 6.6.145; From 6.7.0 · fixed in 6.12.97; From 6.13.0 · fixed in 6.18.40; From 6.19.0 · fixed in 7.1.5

References 8

git.kernel.org