CVE-2026-72101: dm-integrity: fix leaking uninitialized kernel memory

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix leaking uninitialized kernel memory If hash size is less than device's tuple size, dm-integrity is supposed to zero the remaining space. There was a bug in the code that zeroing didn't work. This commit fixes it.

Affected products

Linux kernel: 6.11 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/0c4e9bb1d4101030f55c869f18bd3ece39a77bbb
https://git.kernel.org/stable/c/50af3e51dc709384701dbc721b4bd865285c5f2c
https://git.kernel.org/stable/c/7bb03b2b01b814a9fc14afbfc2cbb2cca5b34750
https://git.kernel.org/stable/c/8f0af8493009a61b4313e0a8c6e03fbc36fd43f9

Get alerted when CVE-2026-72101 or the next vulnerability affects your stack