CVE-2026-89989

A flaw was found in the Linux kernel's Integrity Measurement Architecture (IMA). When processing a file path that exceeds a certain length during hash algorithm validation, the system fails to properly handle an error condition. This mishandling leads to a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact because exploitation is restricted to local authenticated users capable of setting extended attributes on excessively long paths, resulting in a kernel panic without compromising confidentiality or integrity. The failure occurs in the Integrity Measurement Architecture (IMA) during path resolution when validating extended attributes. In default Red Hat Enterprise Linux environments, custom IMA appraisal policies are not enabled out of the box, reducing overall exposure in standard deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.