CVE-2026-98533 PUBLISHED

ipe: protect the dm-verity root hash with RCU

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

ipe: protect the dm-verity root hash with RCU

ipe_bdev_setintegrity() frees the old root hash when dm-verity publishes a new one on ->preresume, while policy evaluation can still be dereferencing it.

Protect the root hash with RCU. The evaluation path already runs under rcu_read_lock().

[FW: remove model name according to latest guideline]

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from e155858dd99523d4afe0f74e9c26e4f4499eb5af to 3bd335ed62444bec61201df7d368a0779e5bd300 (excl.)
  • affected from e155858dd99523d4afe0f74e9c26e4f4499eb5af to 599d0498a39319285afa908762e0c9fad29f772e (excl.)
  • affected from e155858dd99523d4afe0f74e9c26e4f4499eb5af to d7c5bd3159235edb0f2febe2cd3d3b0fb53986f1 (excl.)
  • affected from e155858dd99523d4afe0f74e9c26e4f4499eb5af to 2776e9c28513a1c855a94792b292cbcc533418c8 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.12 is affected
  • unaffected from 0 to 6.12 (excl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.55 to 6.18.* (incl.)
  • unaffected from 7.2.9 to 7.2.* (incl.)
  • unaffected from 7.3-rc5 to * (incl.)

References