CVE-2026-89169
Received Received - Intake

dm-verity Signature Bypass in live-boot

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: MITRE

Description
live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-11
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2026-89169
EUVD
EUVD-2026-75949

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in live-boot allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing. dm-verity is a security feature that ensures the integrity of a system's root filesystem by verifying cryptographic hashes. Without the .verity file, the system cannot validate the filesystem's integrity, potentially allowing unauthorized modifications.

Impact Analysis

This vulnerability could allow attackers to tamper with the system's root filesystem without detection. If exploited, it may lead to unauthorized access, data corruption, or the installation of malicious software. Systems relying on dm-verity for security, such as those in embedded or IoT environments, are particularly at risk.

Compliance Impact

This vulnerability allows attackers to bypass integrity protections, which could lead to unauthorized modifications of system files. This may impact compliance with standards like GDPR (data integrity requirements) and HIPAA (system integrity and audit controls) by enabling undetected tampering with critical system components.

Mitigation Strategies

Ensure the .verity file is present and properly configured to enforce dm-verity roothash signature verification. Verify live-boot configuration and update to a patched version if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-89169. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart