Riskcovery

CVE-2026-98533

ipe: protect the dm-verity root hash with RCU

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ipe: protect the dm-verity root hash with RCU

ipe_bdev_setintegrity() frees the old root hash when dm-verity publishes a new one on ->preresume, while policy evaluation can still be dereferencing it.

Protect the root hash with RCU. The evaluation path already runs under rcu_read_lock().

[FW: remove model name according to latest guideline]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e155858dd99523d4afe0f74e9c26e4f4499eb5af to before 3bd335ed62444bec61201df7d368a0779e5bd300Affected
  • e155858dd99523d4afe0f74e9c26e4f4499eb5af to before 599d0498a39319285afa908762e0c9fad29f772eAffected
  • e155858dd99523d4afe0f74e9c26e4f4499eb5af to before d7c5bd3159235edb0f2febe2cd3d3b0fb53986f1Affected
  • e155858dd99523d4afe0f74e9c26e4f4499eb5af to before 2776e9c28513a1c855a94792b292cbcc533418c8Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.55 through 6.18.*Not affected
  • 7.2.9 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.