CVE-2026-98533

Unknown

Last modified

CVE-2026-98533 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: ipe: protect the dm-verity root hash with RCU ipe_bdev_setintegrity() frees the old root hash when dm-verity publishes a new one on ->preresume, while policy evaluation can still be dereferencing it. Protect the root hash with RCU. The evaluation path already runs under rcu_read_lock(). [FW: remove model name according to latest guideline].

Description

In the Linux kernel, the following vulnerability has been resolved: ipe: protect the dm-verity root hash with RCU ipe_bdev_setintegrity() frees the old root hash when dm-verity publishes a new one on ->preresume, while policy evaluation can still be dereferencing it. Protect the root hash with RCU. The evaluation path already runs under rcu_read_lock(). [FW: remove model name according to latest guideline]

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= e155858dd99523d4afe0f74e9c26e4f4499eb5af, < 3bd335ed62444bec61201df7d368a0779e5bd300; >= e155858dd99523d4afe0f74e9c26e4f4499eb5af, < 599d0498a39319285afa908762e0c9fad29f772e; >= e155858dd99523d4afe0f74e9c26e4f4499eb5af, < d7c5bd3159235edb0f2febe2cd3d3b0fb53986f1; >= e155858dd99523d4afe0f74e9c26e4f4499eb5af, < 2776e9c28513a1c855a94792b292cbcc533418c8
LinuxLinux6.12

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98533?
In the Linux kernel, the following vulnerability has been resolved: ipe: protect the dm-verity root hash with RCU ipe_bdev_setintegrity() frees the old root hash when dm-verity publishes a new one on ->preresume, while policy evaluation can still be dereferencing it. Protect the root hash with RCU. The evaluation path already runs under rcu_read_lock(). [FW: remove model name according to latest guideline]
How severe is CVE-2026-98533?
Severity scoring for CVE-2026-98533 is pending analysis.
How do I fix CVE-2026-98533?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

Are you affected by CVE-2026-98533?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST