CVE-2026-72101

Received Received - Intake

dm-integrity Kernel Memory Leak Fix

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix leaking uninitialized kernel memory If hash size is less than device's tuple size, dm-integrity is supposed to zero the remaining space. There was a bug in the code that zeroing didn't work. This commit fixes it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72101

EUVD

EUVD-2026-59059

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	dm_integrity	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the dm-integrity component failing to zero out uninitialized kernel memory when the hash size is smaller than the device's tuple size. This bug could lead to sensitive data being exposed.

Detection Guidance

This vulnerability affects the Linux kernel's dm-integrity module and involves uninitialized kernel memory leaks. Detection requires checking kernel logs for dm-integrity related errors or examining kernel memory handling. No specific commands are provided in the context to directly detect this issue.

Impact Analysis

If exploited, this flaw may allow attackers to read uninitialized memory contents, potentially exposing sensitive information such as passwords, encryption keys, or other confidential data stored in memory.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance violations if sensitive data is leaked due to this flaw.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve the dm-integrity memory leak issue.

Hi! I’m here to help you understand CVE-2026-72101. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70