The Linux kernel's dm-integrity module had a buffer overflow vulnerability triggered during keyed discard operations. The integrity_metadata component computes a checksum for discarded blocks into a fixed-size buffer. When the tag size used is smaller than the digest size (e.g., hmac(sha256) with a 16-byte tag), the checksum function integrity_sector_checksum writes past the end of the allocated buffer, causing a buffer overflow. The flaw was fixed by adjusting the buffer size calculation to account for extra space, preventing overflow.

This vulnerability can lead to memory corruption in the Linux kernel, which may be exploited to cause denial of service or potentially escalate privileges. The CVSS score of 7.8 indicates a high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

A fix has been implemented in the Linux kernel source code to correct the buffer size calculation and prevent the overflow. Users should apply the official kernel updates that include this patch. Since this is a kernel-level vulnerability, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly stated in the provided data; check the vendor or Linux kernel advisory for the exact fixed versions and update instructions.