CVEvulnerability
CVE-2026-98533
- Status
- Received
- Published
- 2026-10-18
- Last modified
- 2026-10-19
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Description
In the Linux kernel, the following vulnerability has been resolved:
ipe: protect the dm-verity root hash with RCU
ipe_bdev_setintegrity() frees the old root hash when dm-verity publishes
a new one on ->preresume, while policy evaluation can still be
dereferencing it.
Protect the root hash with RCU. The evaluation path already runs under
rcu_read_lock().
[FW: remove model name according to latest guideline]
References
- https://git.kernel.org/stable/c/2776e9c28513a1c855a94792b292cbcc533418c8 git.kernel.org
- https://git.kernel.org/stable/c/3bd335ed62444bec61201df7d368a0779e5bd300 git.kernel.org
- https://git.kernel.org/stable/c/599d0498a39319285afa908762e0c9fad29f772e git.kernel.org
- https://git.kernel.org/stable/c/d7c5bd3159235edb0f2febe2cd3d3b0fb53986f1 git.kernel.org