Riskcovery

CVE-2022-50621

dm: verity-loadpin: Only trust verity targets with enforcement

State
Published
Severity
Not scored
Published
Dec 8, 2025
Updated
May 11, 2026
Reserved
Dec 8, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dm: verity-loadpin: Only trust verity targets with enforcement

Verity targets can be configured to ignore corrupted data blocks. LoadPin must only trust verity targets that are configured to perform some kind of enforcement when data corruption is detected, like returning an error, restarting the system or triggering a panic.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b to before cb1f5b76e39d86c98722696bdf632987aa777b83Affected
  • b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b to before 916ef6232cc4b84db7082b4c3d3cf1753d9462baAffected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.0.3 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.