CVE-2026-72100

Received Received - Intake

dm-integrity Range Limit Check Deadlock Fix

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of limits If dm_integrity_check_limits fails, the code would exit with DM_MAPIO_KILL. However, the range would be already locked at this point, and it wouldn't be unlocked, resulting in a deadlock. Let's move the limit check up, so that when it exits, no resources are leaked.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72100

EUVD

EUVD-2026-59058

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	dm_integrity	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a deadlock issue in the dm-integrity component. When a bio request exceeds limits, the code exits with an error but fails to unlock a previously locked range, causing a deadlock. The fix moves the limit check earlier to prevent resource leaks.

Detection Guidance

This vulnerability is specific to the Linux kernel's dm-integrity module and does not have a direct detection method via network or system commands. It requires kernel-level inspection for deadlock conditions in dm-integrity operations. Check kernel logs for dm-integrity related errors or deadlocks using dmesg | grep dm-integrity.

Impact Analysis

This vulnerability could cause system hangs or crashes if dm-integrity encounters a bio request that exceeds limits. This may lead to denial of service, disrupting services relying on the Linux kernel's device-mapper integrity features.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel deadlock issue in dm-integrity that could cause system hangs but does not involve data breaches or unauthorized access.

Mitigation Strategies

Update the Linux kernel to a patched version where this vulnerability is resolved. Monitor kernel logs for dm-integrity related deadlocks or errors. Ensure no critical operations are running on dm-integrity devices during the update.

Hi! I’m here to help you understand CVE-2026-72100. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70