Riskcovery

CVE-2026-90333

dm-integrity: replace forgeable discard filler with a keyed sector marker

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 21, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dm-integrity: replace forgeable discard filler with a keyed sector marker

The discard-block check in dm_integrity_rw_tag() treats a stored tag of all 0xf6 bytes (DISCARD_FILLER) as proof a block was discarded and skips HMAC verification. allow_discards is only accepted in dm-integrity's standalone mode. An attacker with raw write access to the backing device, but without the integrity key, can stamp any block with an all-0xf6 tag and have it served as authentic.

Add a new "allow_discards_keyed" target argument that marks discarded blocks with a keyed checksum of (salt || sector) instead, computed by integrity_discard_checksum().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 84597a44a9d86ac949900441cea7da0af0f2f473 to before 388c3f6496bb8083576d989e6d249ba9807c6b0bAffected
  • 84597a44a9d86ac949900441cea7da0af0f2f473 to before 5c58ea19a909ef6bed4f0f824e9cd7e30d7e4775Affected
  • 84597a44a9d86ac949900441cea7da0af0f2f473 to before 6228722c27304e4682cddc1fede03898f87e4414Affected
  • 84597a44a9d86ac949900441cea7da0af0f2f473 to before 68c5c42567bc462139128968ebbfadd0aefff519Affected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.