CVE-2026-72096: dm-verity: make error counter atomic
Greg Kroah-Hartman <[email protected]>
| Newsgroups | org.kernel.vger.linux-cve-announce |
|---|---|
| Message-ID | <2026081524-CVE-2026-72096-3049@gregkh> |
From: Greg Kroah-Hartman <[email protected]> Description =========== In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v->corrupted_errs" was not atomic, thus it could be subject to race conditions. The call to dm_audit_log_target("max-corrupted-errors") may be skipped due to the races. The Linux kernel CVE team has assigned CVE-2026-72096 to this issue. Affected and fixed versions =========================== Issue introduced in 4.1 with commit 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 and fixed in 6.6.148 with commit ac99781115d37d10894653b47941d9d8fc26fa64 Issue introduced in 4.1 with commit 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 and fixed in 6.12.97 with commit 3303e5c6501e3638ded8e9402d703805b00ce64e Issue introduced in 4.1 with commit 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 and fixed in 6.18.40 with commit 089e05b644d5aa786c21af467c80b24d691becb1 Issue introduced in 4.1 with commit 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 and fixed in 7.1.5 with commit 752e214b2c6f15b40b0d873a2ce27733ce0884c6 Issue introduced in 4.1 with commit 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 and fixed in 7.2-rc3 with commit 8ec4d9c5a5cf4b61fc087f871465b1f79b393325 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2026-72096 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/md/dm-verity-target.c drivers/md/dm-verity.h Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/ac99781115d37d10894653b47941d9d8fc26fa64 https://git.kernel.org/stable/c/3303e5c6501e3638ded8e9402d703805b00ce64e https://git.kernel.org/stable/c/089e05b644d5aa786c21af467c80b24d691becb1 https://git.kernel.org/stable/c/752e214b2c6f15b40b0d873a2ce27733ce0884c6 https://git.kernel.org/stable/c/8ec4d9c5a5cf4b61fc087f871465b1f79b393325