CVE-2026-99087

dm-integrity: fix NULL pointer dereference when the 'R' flag is used

No known exploitation. No EPSS score yet. Fixed versions are out.

CVSS —Not scored EPSS percentile—No score yet CISA KEVNot listedNo confirmed exploitation
No public exploit known Fix1 product3 fixed builds listed below

Published 2026-10-23Updated 2026-10-23Sources: CVE.org, NVD

NVD CVE.org

What to do

Find your product and version, then upgrade to the build on the right.

LinuxAffected: ≥ 468dfca38b1a6fbdccd195d875599cb7c8875cd9, < 2e25842f0e4423e0efb243f56153d842ed6b933fUpgrade to: 2e25842f0e4423e0efb243f56153d842ed6b933fAffected: ≥ 468dfca38b1a6fbdccd195d875599cb7c8875cd9, < 69ed43ed8a174465fca1ba6bfbde53e4618c8956Upgrade to: 69ed43ed8a174465fca1ba6bfbde53e4618c8956Affected: ≥ 468dfca38b1a6fbdccd195d875599cb7c8875cd9, < 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84Upgrade to: 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84Stated by: CVE record

Versions as the sources state them. Full version matrix after sign-in

What it is

From the CVE record

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SB_FLAG_DIRTY_BITMAP flag set and the user activates the device in the 'R' mode, a crash in dm_integrity_resume happens because the function attempts to read the journal containing the bitmap. This patch makes dm-integrity skip any writes to the device in dm_integrity_resume if the device is activated in the 'R' mode.

In plain language

No plain-language summary for this CVE yet.

Exploitation

Where each signal puts this CVE on the scale from published to confirmed exploited.

CISA KEV: Not in the catalog. CISA has not confirmed exploitation.
Public exploits: No public exploit or proof of concept found in the sources we track.
EPSS: No EPSS score yet. New CVEs are usually scored within a few days.