SB20261029181 - Race condition in Linux kernel md driver

Description

This security bulletin contains information about 1 vulnerability.

1) Race condition (CVE-ID: CVE-2026-99136)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause failed encrypted storage operations to be reported as successful, potentially compromising data integrity.

The vulnerability exists due to a race condition in the Linux kernel dm-crypt crypt_dec_pending function when concurrent I/O completion updates the error status between its initial read and the final reference decrement. A local user can exploit this timing window to cause completion with a stale success status, masking a failed write or a failed read whose data was never decrypted.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/148845aa1921d95ef5dc851c76e6a284f6657df6
• https://git.kernel.org/stable/c/4f16bb982b27b9f5a15301f622c318001fe521f8
• https://git.kernel.org/stable/c/ac5d887ab93592fc5e3605fe30c1d8d232d609b3