CVE-2026-72099
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
In the Linux kernel, the dm-integrity module has a bug where the hash_offset variable is incremented twice. The variable is already incremented in the loop, and the code increments it again, leading to incorrect behavior. The fix removes the extra increment.
Risk Assessment
The risk includes incorrect operation of the integrity feature, which could lead to data write or read errors.
Recommendation
It is recommended to update the Linux kernel to a version with the fix that removes the double increment of hash_offset.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for (i = 0; i < to_copy; i++, ts--)". Do not increment it again.