In the Linux kernel, the following vulnerability has been resolved: ipe: protect the dm-verity root hash with RCU ipe_bdev_setintegrity() frees the… (CVE-2026-98533)

The Linux kernel contained a vulnerability in the ipe_bdev_setintegrity() function where the old dm-verity root hash was freed prematurely during the ->preresume phase, while policy evaluation could still dereference it. This use-after-free condition was addressed by protecting the root hash with RCU, leveraging the existing rcu_read_lock() in the evaluation path to ensure safe concurrent access.

The vulnerability could lead to use-after-free conditions in the kernel's dm-verity integrity checking mechanism, potentially causing kernel instability or crashes. No specific exploitation details or active exploits are reported.

A fix has been implemented in the Linux kernel to protect the dm-verity root hash with RCU synchronization. Users should update to the patched kernel version once available. Since no patch links or affected versions are explicitly provided, check the official Linux kernel advisories for the exact fixed versions and apply updates accordingly.