CVE-2026-99086

A flaw was found in the Linux kernel's dm-integrity subsystem. When resuming a suspended integrity device, the kernel re-reads the storage metadata (superblock) without verifying that its layout matches the initial configuration. A local attacker with access to the underlying storage device could alter this metadata while the device is suspended, triggering an out-of-bounds memory write that leads to a system crash and Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.