CVE-2026-72099

A flaw was found in the dm-integrity component of the Linux kernel. This vulnerability arises from an error where a hash_offset variable is incremented twice, leading to incorrect memory access. A local attacker could exploit this issue to trigger a system crash, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the dm-integrity kernel module from loading. Create a file named /etc/modprobe.d/disable-dm-integrity.conf with the following content:

blacklist dm_integrity install dm_integrity /bin/true

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. Disabling this module may impact systems relying on device-mapper integrity features. A system reboot is required for the changes to be applied.