CVE-2026-72096

A flaw was found in the Linux kernel's dm-verity component. The 'corrupted_errs' counter, which tracks errors in corrupted blocks, was not atomic. This vulnerability could allow a race condition to occur, potentially causing the system to skip auditing when the maximum number of corrupted errors is reached. This could lead to a lack of visibility into critical system integrity issues.

This vulnerability is rated as a Moderate impact because it requires local access to induce concurrent I/O against corrupted storage and is limited to suppressing audit log events without compromising confidentiality or host execution control. Standard Red Hat Enterprise Linux environments do not configure or mount dm-verity volumes by default, constraining exposure to specialized verified-boot or immutable image deployments. Furthermore, the race condition only affects the notification threshold counter and does not prevent the underlying block integrity validation from rejecting corrupted data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.