CVE-2026-72096

dm-verity: make error counter atomic

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 23, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dm-verity: make error counter atomic

The error counter "v->corrupted_errs" was not atomic, thus it could be subject to race conditions. The call to dm_audit_log_target("max-corrupted-errors") may be skipped due to the races.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before b8eddcb1bf72199451950aff9087bd76da80635dAffected 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before aab5cb8a40e82bd33d0f3ae3c73041848b18bfd2Affected 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before a7df22c4e0e9110f0be577919d3cb9389b2aba65Affected 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before ac99781115d37d10894653b47941d9d8fc26fa64Affected 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before 3303e5c6501e3638ded8e9402d703805b00ce64eAffected 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before 089e05b644d5aa786c21af467c80b24d691becb1Affected 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before 752e214b2c6f15b40b0d873a2ce27733ce0884c6Affected 65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before 8ec4d9c5a5cf4b61fc087f871465b1f79b393325Affected
LinuxLinux	4.1Affected before 4.1Not affected 5.10.266 through 5.10.Not affected 5.15.217 through 5.15.Not affected 6.1.184 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before b8eddcb1bf72199451950aff9087bd76da80635dAffected
65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before aab5cb8a40e82bd33d0f3ae3c73041848b18bfd2Affected
65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before a7df22c4e0e9110f0be577919d3cb9389b2aba65Affected
65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before ac99781115d37d10894653b47941d9d8fc26fa64Affected
65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before 3303e5c6501e3638ded8e9402d703805b00ce64eAffected
65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before 089e05b644d5aa786c21af467c80b24d691becb1Affected
65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before 752e214b2c6f15b40b0d873a2ce27733ce0884c6Affected
65ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8 to before 8ec4d9c5a5cf4b61fc087f871465b1f79b393325Affected

LinuxLinux

4.1Affected
before 4.1Not affected
5.10.266 through 5.10.*Not affected
5.15.217 through 5.15.*Not affected
6.1.184 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.