CVE-2026-72096

dm-verity: make error counter atomic

N/A
Published: August 15, 2026 at 05:52 AM UTC
Updated: August 23, 2026 at 01:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v->corrupted_errs" was not atomic, thus it could be subject to race conditions. The call to dm_audit_log_target("max-corrupted-errors") may be skipped due to the races.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.1 ≤ v < 5.10.2664.1 ≤ v < 5.15.2174.1 ≤ v < 6.1.1844.1 ≤ v < 6.12.974.1 ≤ v < 6.18.404.1 ≤ v < 6.6.1484.1 ≤ v < 7.1.54.1 ≤ v < 7.24.165ff5b7ddf0541f2b6e5cc59c47bfbf6cbcd91b8
Vendor states this is fixed in 089e05b644d5aa786c21af467c80b24d691becb1 (fixed)
Vendor states this is fixed in 3303e5c6501e3638ded8e9402d703805b00ce64e (fixed)
Vendor states this is fixed in 752e214b2c6f15b40b0d873a2ce27733ce0884c6 (fixed)
Vendor states this is fixed in 8ec4d9c5a5cf4b61fc087f871465b1f79b393325 (fixed)
Vendor states this is fixed in a7df22c4e0e9110f0be577919d3cb9389b2aba65 (fixed)
Vendor states this is fixed in aab5cb8a40e82bd33d0f3ae3c73041848b18bfd2 (fixed)
Vendor states this is fixed in ac99781115d37d10894653b47941d9d8fc26fa64 (fixed)
Vendor states this is fixed in b8eddcb1bf72199451950aff9087bd76da80635d (fixed)
Vendor states this is fixed in 4.1 (unaffected)
Vendor states this is fixed in 5.10.266 (unaffected)
Vendor states this is fixed in 5.15.217 (unaffected)
Vendor states this is fixed in 6.1.184 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.148 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card