CVE-2026-72099

dm-integrity: don't increment hash_offset twice

State: Published
Severity: 7.1 High
Published: Aug 15, 2026
Updated: Oct 19, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dm-integrity: don't increment hash_offset twice

hash_offset is already incremented in the loop "for (i = 0; i < to_copy; i++, ts--)". Do not increment it again.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L	Linux

Weaknesses

CWE-682 Incorrect Calculation

Affected Products

Product	Versions
LinuxLinux	84597a44a9d86ac949900441cea7da0af0f2f473 to before c66b1781a54984227e94b862be9328d81d81e51cAffected 84597a44a9d86ac949900441cea7da0af0f2f473 to before 39697e2759ac23e65361fe61482f8174cad8a752Affected 84597a44a9d86ac949900441cea7da0af0f2f473 to before e6646f4d711d74930d39cce6fb7bfcae4cbee5fdAffected 84597a44a9d86ac949900441cea7da0af0f2f473 to before cf9feed8c131e303ecf2afebe6f791be018818adAffected 84597a44a9d86ac949900441cea7da0af0f2f473 to before 4f4e43337e9ef322595201cfc24def50fd624219Affected 84597a44a9d86ac949900441cea7da0af0f2f473 to before 5dfd8042635278613da3b88553e25ade2103cd58Affected 84597a44a9d86ac949900441cea7da0af0f2f473 to before 829476c06496aab018f14127c055adb164d1a750Affected 84597a44a9d86ac949900441cea7da0af0f2f473 to before edf025f083854f80032b73a1aad69a3c90db236fAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.266 through 5.10.Not affected 5.15.217 through 5.15.Not affected 6.1.184 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

84597a44a9d86ac949900441cea7da0af0f2f473 to before c66b1781a54984227e94b862be9328d81d81e51cAffected
84597a44a9d86ac949900441cea7da0af0f2f473 to before 39697e2759ac23e65361fe61482f8174cad8a752Affected
84597a44a9d86ac949900441cea7da0af0f2f473 to before e6646f4d711d74930d39cce6fb7bfcae4cbee5fdAffected
84597a44a9d86ac949900441cea7da0af0f2f473 to before cf9feed8c131e303ecf2afebe6f791be018818adAffected
84597a44a9d86ac949900441cea7da0af0f2f473 to before 4f4e43337e9ef322595201cfc24def50fd624219Affected
84597a44a9d86ac949900441cea7da0af0f2f473 to before 5dfd8042635278613da3b88553e25ade2103cd58Affected
84597a44a9d86ac949900441cea7da0af0f2f473 to before 829476c06496aab018f14127c055adb164d1a750Affected
84597a44a9d86ac949900441cea7da0af0f2f473 to before edf025f083854f80032b73a1aad69a3c90db236fAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.266 through 5.10.*Not affected
5.15.217 through 5.15.*Not affected
6.1.184 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.