Live › vulnerability › CVE-2026-99087
Go to dashboardWhen a dm-integrity device has its dirty bitmap flag set and is activated in 'R' mode, the kernel dereferences a NULL pointer while reading the journal during resume. The result is a kernel crash, which is a denial of service on the host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems that use dm-integrity (device-mapper integrity targets) with the dirty bitmap flag set and activate devices with the 'R' flag. The sources do not name affected kernel versions. Hosts without dm-integrity devices are not exposed.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
dm-integrity: fix NULL pointer dereference when the 'R' flag is used
If the dm-integrity device has the SB_FLAG_DIRTY_BITMAP flag set and the user activates the device in the 'R' mode, a crash in dm_integrity_resume happens because the function attempts to read the journal containing the bitmap.
This patch makes dm-integrity skip any writes to the device in dm_integrity_resume if the device is activated in the 'R' mode.
This page as .md · .json · in your agent: get_signal("CVE-2026-99087")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.