CVE-2026-72101

A flaw was found in dm-integrity, a component of the Linux kernel. This vulnerability occurs when the hash size is less than the device's tuple size, and dm-integrity fails to properly zero out the remaining memory space. This oversight can lead to the leaking of uninitialized kernel memory, potentially allowing an attacker to gain access to sensitive information.

dm-integrity inline mode can leak uninitialized kernel memory because the padding area between tag_size and tuple_size is not actually zeroed. The memset length is computed as tuple_size minus tuple_size, so no bytes are cleared before the integrity payload is used. For the CVSS the PR:L is used in the paranoid score if a local user or service can trigger I/O on the dm-integrity device and later read the affected metadata or device image. The issue is not network reachable and requires local access to a system using dm-integrity inline mode. Impact is information disclosure only, with no evidence of memory corruption, privilege escalation, or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.