Описание
In the Linux kernel, the following vulnerability has been resolved:
dm-integrity: don't increment hash_offset twice
hash_offset is already incremented in the loop "for (i = 0; i < to_copy;
i++, ts--)". Do not increment it again.
A flaw was found in the dm-integrity component of the Linux kernel. This vulnerability arises from an error where a hash_offset variable is incremented twice, leading to incorrect memory access. A local attacker could exploit this issue to trigger a system crash, resulting in a denial of service.
Меры по смягчению последствий
To mitigate this issue, prevent the dm-integrity kernel module from loading. Create a file named /etc/modprobe.d/disable-dm-integrity.conf with the following content:
blacklist dm_integrity
install dm_integrity /bin/true
After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. Disabling this module may impact systems relying on device-mapper integrity features. A system reboot is required for the changes to be applied.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Affected | ||
| Red Hat Enterprise Linux 10 | kernel | Fixed | RHSA-2026:75576 | 05.10.2026 |
| Red Hat Enterprise Linux 8 | kernel-rt | Fixed | RHSA-2026:74132 | 30.09.2026 |
| Red Hat Enterprise Linux 8 | kernel | Fixed | RHSA-2026:74133 | 30.09.2026 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2026:76739 | 08.10.2026 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2026:76739 | 08.10.2026 |
| Shadow Migration Toolkit for Virtualization for RHEL 10 | kernel | Fixed | RHSA-2026:75576 | 05.10.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.3 High
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for (i = 0; i < to_copy; i++, ts--)". Do not increment it again.
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for (i = 0; i < to_copy; i++, ts--)". Do not increment it again.
In the Linux kernel, the following vulnerability has been resolved: d ...
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for (i = 0; i < to_copy; i++, ts--)". Do not increment it again.
EPSS
7.3 High
CVSS3