CVE-2026-43132

Medium

Published: —Translated: 17/06/2026(UTC)NVD NIST

Summary

In the Linux kernel, a vulnerability related to dm-verity has been resolved, which incorrectly handled errors in the dm_bufio_client_create() function. If the call to this function fails, dm_bufio_client_destroy() is later called with an ERR_PTR() argument.

Risk Assessment

This vulnerability may lead to improper memory management, potentially resulting in system crashes or unpredictable behavior of applications using dm-verity.

Recommendation

It is recommended to update the Linux kernel to the latest version to eliminate this vulnerability and ensure proper memory management.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm_bufio_client_create() in verity_fec_ctr() fails, then dm_bufio_client_destroy() is later called with an ERR_PTR() argument. That causes a c