CVE-2026-72099

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for (i = 0; i < to_copy; i++, ts--)". Do not increment it again.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/39697e2759ac23e65361fe61482f8174cad8a752
https://git.kernel.org/stable/c/4f4e43337e9ef322595201cfc24def50fd624219
https://git.kernel.org/stable/c/5dfd8042635278613da3b88553e25ade2103cd58
https://git.kernel.org/stable/c/829476c06496aab018f14127c055adb164d1a750
https://git.kernel.org/stable/c/c66b1781a54984227e94b862be9328d81d81e51c
https://git.kernel.org/stable/c/cf9feed8c131e303ecf2afebe6f791be018818ad
https://git.kernel.org/stable/c/e6646f4d711d74930d39cce6fb7bfcae4cbee5fd
https://git.kernel.org/stable/c/edf025f083854f80032b73a1aad69a3c90db236f

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:21

Updated : 2026-08-23 13:16

NVD link : CVE-2026-72099

Mitre link : CVE-2026-72099

CVE.ORG link : CVE-2026-72099

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-72099", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "84597a44a9d86ac949900441cea7da0af0f2f473", "lessThan": "c66b1781a54984227e94b862be9328d81d81e51c", "versionType": "git"}, {"status": "affected", "version": "84597a44a9d86ac949900441cea7da0af0f2f473", "lessThan": "39697e2759ac23e65361fe61482f8174cad8a752", "versionType": "git"}, {"status": "affected", "version": "84597a44a9d86ac949900441cea7da0af0f2f473", "lessThan": "e6646f4d711d74930d39cce6fb7bfcae4cbee5fd", "versionType": "git"}, {"status": "affected", "version": "84597a44a9d86ac949900441cea7da0af0f2f473", "lessThan": "cf9feed8c131e303ecf2afebe6f791be018818ad", "versionType": "git"}, {"status": "affected", "version": "84597a44a9d86ac949900441cea7da0af0f2f473", "lessThan": "4f4e43337e9ef322595201cfc24def50fd624219", "versionType": "git"}, {"status": "affected", "version": "84597a44a9d86ac949900441cea7da0af0f2f473", "lessThan": "5dfd8042635278613da3b88553e25ade2103cd58", "versionType": "git"}, {"status": "affected", "version": "84597a44a9d86ac949900441cea7da0af0f2f473", "lessThan": "829476c06496aab018f14127c055adb164d1a750", "versionType": "git"}, {"status": "affected", "version": "84597a44a9d86ac949900441cea7da0af0f2f473", "lessThan": "edf025f083854f80032b73a1aad69a3c90db236f", "versionType": "git"}], "programFiles": ["drivers/md/dm-integrity.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.7"}, {"status": "unaffected", "version": "0", "lessThan": "5.7", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.266", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.217", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.184", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.145", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/md/dm-integrity.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:21:24.000", "references": [{"url": "https://git.kernel.org/stable/c/39697e2759ac23e65361fe61482f8174cad8a752", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/4f4e43337e9ef322595201cfc24def50fd624219", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5dfd8042635278613da3b88553e25ade2103cd58", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/829476c06496aab018f14127c055adb164d1a750", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c66b1781a54984227e94b862be9328d81d81e51c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/cf9feed8c131e303ecf2afebe6f791be018818ad", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e6646f4d711d74930d39cce6fb7bfcae4cbee5fd", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/edf025f083854f80032b73a1aad69a3c90db236f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-integrity: don't increment hash_offset twice\n\nhash_offset is already incremented in the loop \"for (i = 0; i < to_copy;\ni++, ts--)\". Do not increment it again."}], "lastModified": "2026-08-23T13:16:40.160", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}