CVE-2026-99087: dm-integrity: fix NULL pointer dereference when the 'R' flag is used

Unscored severity · published Oct 23, 2026

CVE-2026-99087

dm-integrity: fix NULL pointer dereference when the 'R' flag is used

New

–

CVSS

0.2%

EPSS

On KEV

Description

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SB_FLAG_DIRTY_BITMAP flag set and the user activates the device in the 'R' mode, a crash in dm_integrity_resume happens because the function attempts to read the journal containing the bitmap. This patch makes dm-integrity skip any writes to the device in dm_integrity_resume if the device is activated in the 'R' mode.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.2% · higher than 5% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Linux · Linux

468dfca38b1a6fbdccd195d875599cb7c8875cd9 before 2e25842f0e4423e0efb243f56153d842ed6b933f; 468dfca38b1a6fbdccd195d875599cb7c8875cd9 before 69ed43ed8a174465fca1ba6bfbde53e4618c8956; 468dfca38b1a6fbdccd195d875599cb7c8875cd9 before 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84; 5.2 · source: vendor

Affected product

Linux

All Linux CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-99087

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-99087

git.kernel.org

https://git.kernel.org/stable/c/2e25842f0e4423e0efb243f56153d842ed6b933f

git.kernel.org

https://git.kernel.org/stable/c/69ed43ed8a174465fca1ba6bfbde53e4618c8956

git.kernel.org

https://git.kernel.org/stable/c/7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84