CVE-2026-99087: Linux kernel · dm-integrity: fix NULL pointer dereference when the 'R' flag is used
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in 69ed43ed8a174465fca1ba6bfbde53e4618c8956 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 13:07 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 69ed43ed8a174465fca1ba6bfbde53e4618c8956, 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84, 2e25842f0e4423e0efb243f56153d842ed6b933f
Exploitation evidence
Disclosed: evidence found.
CVE published 23 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to 69ed43ed8a174465fca1ba6bfbde53e4618c8956, 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84 or 2e25842f0e4423e0efb243f56153d842ed6b933f.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available in the Linux kernel as indicated by the fixed commit versions. Users should update to the patched kernel versions containing the fix identified by the commits 69ed43ed8a174465fca1ba6bfbde53e4618c8956, 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84, and 2e25842f0e4423e0efb243f56153d842ed6b933f.
Description
A NULL pointer dereference vulnerability in the Linux kernel's dm-integrity device occurs when the device is activated with the 'R' flag and the SB_FLAG_DIRTY_BITMAP flag is set. This causes a crash in the dm_integrity_resume function due to an attempt to read the journal containing the bitmap. The issue has been fixed by making dm-integrity skip writes during resume when activated in 'R' mode.