What’s Vulnerable › Vulnerabilities

CVE-2026-72099: dm-integrity: don't increment hash_offset twice

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-10-19
• Weakness: CWE-682

Description

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for (i = 0; i < to_copy; i++, ts--)". Do not increment it again.

Affected products

• Linux kernel: 5.7 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/39697e2759ac23e65361fe61482f8174cad8a752
• https://git.kernel.org/stable/c/4f4e43337e9ef322595201cfc24def50fd624219
• https://git.kernel.org/stable/c/5dfd8042635278613da3b88553e25ade2103cd58
• https://git.kernel.org/stable/c/829476c06496aab018f14127c055adb164d1a750
• https://git.kernel.org/stable/c/c66b1781a54984227e94b862be9328d81d81e51c
• https://git.kernel.org/stable/c/cf9feed8c131e303ecf2afebe6f791be018818ad
• https://git.kernel.org/stable/c/e6646f4d711d74930d39cce6fb7bfcae4cbee5fd
• https://git.kernel.org/stable/c/edf025f083854f80032b73a1aad69a3c90db236f

Get alerted when CVE-2026-72099 or the next vulnerability affects your stack