CVE-2026-43132

A flaw was found in the Linux kernel's dm-verity component. When the dm_bufio_client_create() function fails within verity_fec_ctr(), the subsequent call to dm_bufio_client_destroy() with an error pointer argument leads to a system crash. This vulnerability could allow a local attacker to cause a Denial of Service (DoS) by triggering this specific failure condition.

Red Hat has rated this vulnerability as Moderate impact because exploitation is restricted to local environments and results only in a kernel panic rather than code execution or privilege escalation. The issue lies within device-mapper verified block device handling when Forward Error Correction is enabled, requiring specific device-mapper initialization parameters and a low-memory or resource-failure condition to trigger. Standard Red Hat Enterprise Linux systems do not deploy dm-verity targets with error correction by default, limiting general exposure to specialized environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.