What’s Vulnerable › Vulnerabilities

CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-06 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm_bufio_client_create() in verity_fec_ctr() fails, then dm_bufio_client_destroy() is later called with an ERR_PTR() argument. That causes a crash. Fix this.

Affected products

• Linux kernel: from 4.5 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16 — fixed in 5.10.252, 5.15.202, 6.1.165, 6.12.75, 6.18.16, 6.19.6

How to fix

Upgrade to a fixed version: Linux kernel 5.10.252, 5.15.202, 6.1.165, 6.12.75. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/031f2adc1499b112a39ac316bbab3c80bba16cf2
• https://git.kernel.org/stable/c/119f4f04186fa4f33ee6bd39af145cdaff1ff17f
• https://git.kernel.org/stable/c/451cc650e40e8c3222d37877a9e4be0fcaacb9c8
• https://git.kernel.org/stable/c/5c2217ddb3b7e7ac25f4ebe9061258fc8f1c9167
• https://git.kernel.org/stable/c/6283e49af87a9c121bb01e5a64a7fe5706c210bc
• https://git.kernel.org/stable/c/9b8dc1d327e2928f3da59ced0595d850d31c0936
• https://git.kernel.org/stable/c/b154a868a3856fb5216c4f82981d8a503832e095
• https://git.kernel.org/stable/c/d3e1f1adc8a0289efe2d2cdc90edb8c6ffe0b5ef

Get alerted when CVE-2026-43132 or the next vulnerability affects your stack