{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72101", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.905Z", "datePublished": "2026-08-15T05:52:45.548Z", "dateUpdated": "2026-08-17T05:08:13.573Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:08:13.573Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-integrity: fix leaking uninitialized kernel memory\n\nIf hash size is less than device's tuple size, dm-integrity is supposed\nto zero the remaining space. There was a bug in the code that zeroing\ndidn't work. This commit fixes it."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/md/dm-integrity.c"], "versions": [{"version": "fb0987682c629c1d2c476f35f6fde405a5e304a4", "lessThan": "50af3e51dc709384701dbc721b4bd865285c5f2c", "status": "affected", "versionType": "git"}, {"version": "fb0987682c629c1d2c476f35f6fde405a5e304a4", "lessThan": "0c4e9bb1d4101030f55c869f18bd3ece39a77bbb", "status": "affected", "versionType": "git"}, {"version": "fb0987682c629c1d2c476f35f6fde405a5e304a4", "lessThan": "8f0af8493009a61b4313e0a8c6e03fbc36fd43f9", "status": "affected", "versionType": "git"}, {"version": "fb0987682c629c1d2c476f35f6fde405a5e304a4", "lessThan": "7bb03b2b01b814a9fc14afbfc2cbb2cca5b34750", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/md/dm-integrity.c"], "versions": [{"version": "6.11", "status": "affected"}, {"version": "0", "lessThan": "6.11", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/50af3e51dc709384701dbc721b4bd865285c5f2c"}, {"url": "https://git.kernel.org/stable/c/0c4e9bb1d4101030f55c869f18bd3ece39a77bbb"}, {"url": "https://git.kernel.org/stable/c/8f0af8493009a61b4313e0a8c6e03fbc36fd43f9"}, {"url": "https://git.kernel.org/stable/c/7bb03b2b01b814a9fc14afbfc2cbb2cca5b34750"}], "title": "dm-integrity: fix leaking uninitialized kernel memory", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/md/dm-integrity.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "50af3e51dc709384701dbc721b4bd865285c5f2c", "status": "affected", "version": "fb0987682c629c1d2c476f35f6fde405a5e304a4", "versionType": "git"}, {"lessThan": "0c4e9bb1d4101030f55c869f18bd3ece39a77bbb", "status": "affected", "version": "fb0987682c629c1d2c476f35f6fde405a5e304a4", "versionType": "git"}, {"lessThan": "8f0af8493009a61b4313e0a8c6e03fbc36fd43f9", "status": "affected", "version": "fb0987682c629c1d2c476f35f6fde405a5e304a4", "versionType": "git"}, {"lessThan": "7bb03b2b01b814a9fc14afbfc2cbb2cca5b34750", "status": "affected", "version": "fb0987682c629c1d2c476f35f6fde405a5e304a4", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/md/dm-integrity.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"lessThan": "6.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-integrity: fix leaking uninitialized kernel memory\n\nIf hash size is less than device's tuple size, dm-integrity is supposed\nto zero the remaining space. There was a bug in the code that zeroing\ndidn't work. This commit fixes it."}], "id": "CVE-2026-72101", "lastModified": "2026-08-17T06:18:09.030", "metrics": {}, "published": "2026-08-15T06:21:24.223", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0c4e9bb1d4101030f55c869f18bd3ece39a77bbb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/50af3e51dc709384701dbc721b4bd865285c5f2c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7bb03b2b01b814a9fc14afbfc2cbb2cca5b34750"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8f0af8493009a61b4313e0a8c6e03fbc36fd43f9"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: dm-integrity: fix leaking uninitialized kernel memory", "id": "2516360", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516360"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-909", "details": ["A flaw was found in dm-integrity, a component of the Linux kernel. This vulnerability occurs when the hash size is less than the device's tuple size, and dm-integrity fails to properly zero out the remaining memory space. This oversight can lead to the leaking of uninitialized kernel memory, potentially allowing an attacker to gain access to sensitive information."], "name": "CVE-2026-72101", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-72101\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72101\nhttps://lore.kernel.org/linux-cve-announce/2026081524-CVE-2026-72101-574c@gregkh/T"], "threat_severity": "Moderate"}