SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72101

UNKNOWN · CVSS N/A EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the dm-integrity module, which fails to properly zero out uninitialized kernel memory when the hash size is smaller than the device's tuple size. This oversight could potentially lead to information leakage, exposing sensitive data from memory. System administrators and security teams managing Linux environments should prioritize this fix to mitigate risks associated with unintentional data exposure.

CVE
CVE-2026-72101
Severity
UNKNOWN
CVSS
N/A
EPSS
0.20%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix leaking uninitialized kernel memory If hash size is less than device's tuple size, dm-integrity is supposed to zero the remaining space. There was a bug in the code that zeroing didn't work. This commit fixes it.